<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: pa-dss]]></title>
    <link>http://securityratty.com/tag/pa-dss</link>
    <description></description>
    <pubDate>Wed, 30 Apr 2008 00:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Palo Alto's performance holds steady as security measures increase ]]></title>
      <link>http://securityratty.com/article/cded7a82de797353bc5017451f0d9784</link>
      <guid>http://securityratty.com/article/cded7a82de797353bc5017451f0d9784</guid>
      <description><![CDATA[In August, we tested Palo Alto Networks' PA-4020, the first fully application-aware firewall to be commercially marketed. When we attempted to test performance on the PA-4020 we ran into a hitch: Palo...]]></description>
      <content:encoded><![CDATA[In August, we tested Palo Alto Networks' PA-4020, the first fully application-aware firewall to be commercially marketed. When we attempted to test performance on the PA-4020 we ran into a hitch: Palo Alto's application identification logic discovered that we were using Spirent test tools.]]></content:encoded>
      <pubDate>Sun, 05 Oct 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/palo alto">palo alto</category>
      <category domain="http://securityratty.com/tag/palo alto networks">palo alto networks</category>
      <category domain="http://securityratty.com/tag/application identification logic">application identification logic</category>
      <category domain="http://securityratty.com/tag/spirent test tools">spirent test tools</category>
      <category domain="http://securityratty.com/tag/test performance">test performance</category>
      <category domain="http://securityratty.com/tag/pa-4020">pa-4020</category>
      <category domain="http://securityratty.com/tag/hitch">hitch</category>
      <category domain="http://securityratty.com/tag/firewall">firewall</category>
      <category domain="http://securityratty.com/tag/august">august</category>
      <source url="http://www.networkworld.com/reviews/2008/100608-test-palo-alto-performance.html?fsrc=rss-security">Palo Alto's performance holds steady as security measures increase </source>
    </item>
    <item>
      <title><![CDATA[McIrony: An unexpected response from McAfee]]></title>
      <link>http://securityratty.com/article/b7777c8973f62604f441965769aa7200</link>
      <guid>http://securityratty.com/article/b7777c8973f62604f441965769aa7200</guid>
      <description><![CDATA[Irony: incongruity between what might be expected and what actually occurs

Right before Black Hat, I put together what I believed was a pretty strong arguement against McAfee Secure - Hacker Safe, at...]]></description>
      <content:encoded><![CDATA[Irony: incongruity between what might be expected and what actually occurs.<br /><br />Right before Black Hat, I put together what I believed was a pretty strong  arguement against McAfee Secure - Hacker Safe, at a level heretofore unexplored. I believe it was more damaging than anything I've said to date, and as such, presented potential risk for me. So I ran it by some friends before publishing it. Then a most extraordinary thing happened. I had a long chat with <a href="http://blogs.zdnet.com/security/?p=1668" target="_blank">Nate McFeters</a>, who described an awakening he'd recently experienced. He shared with me the belief that a better approach to potentially negative security research might be to try to create a positive outcome, and worry less about press cycles or exposure, the 15 minutes of fame if you will. He pointed to people like <a href="http://blogs.zdnet.com/security/?p=1030" target="_blank">Mark Dowd</a> as an example of people who conduct crushingly good research, and steer clear of the petty, ego driven  bulls**t. <br />There I sat, repose like the thinking <a href="http://www.downshoredrift.com/photos/uncategorized/thinking_man.gif" target="_blank">man</a>, frozen for minutes. "Nate", I said, "I think you're right." <br />What do I aspire to as an information security professional; more readership or street cred than the next guy, or the respect of my peers for contributing to the greater <a href="http://holisticinfosec.org/content/view/21/31/" target="_blank">good</a>? Attention, press cycles, 15 minutes...it all has its allure, trust me on this. <br />But at the end of the day, I really do want to contribute to the greater good.<br />So I did something different. I sent my findings to McAfee and offered them an opportunity to respond, rather than publish first, ask questions later. <br />Here's the real kicker. <br />They responded.<br />I had a three hour lunch this past Thursday with two gentlemen from McAfee, who flew up from the Bay Area to Seattle to have a face to face with me. This, all by itself, speaks volumes to me. In addition to meeting with Kirk Lawrence, the new Director of Product Management for McAfee Secure, there I sat with, of all people, Joe Pierini, the very guy who has suffered more than his share of abuse, up to and including the <a href="http://pwnie-awards.org/2008/awards.html">Pwnie</a>.  As I have been a direct contributor and participant in heckling Joe, you can imagine our meeting could have been uncomfortable. It was not. <br />I have had expectations of McAfee and Scan Alert that to date have not been met, or my (your) perception has been that they have not been met.<br />This meeting was designed as an opportunity to voice some of these expectations, and see if McAfee, in turn, believed there was any merit to them.<br />Surprisingly, at least as spoken, we weren't all that far apart.<br />While, as a naive idealist, I believe that security should come before conversions, I am also grounded enough of a realize that the most attainable goal can be a marriage of both. This premise frames my expectations of McAfee. <br />Can they not be more of a "thought leader" for all the Ma & Pa websites who rely on McAfee Secure, first for a higher conversion rate, then security?<br />Can they not hold merchants to a higher standard, without alienating them and losing business?<br />Can they not embrace the security research community in a fashion that McAfee, the security community, the merchants, and consumers can all benefit from?<br />Can they not be more transparent in their approach, providing more details and feedback about their methods, their findings, and their vision?<br />I know McAfee Secure - Hacker Safe scans can find vulnerabilities.<br />I know they report the vulnerabilities to merchants.<br />What happens thereafter is where things begin to break down. <br />Can the scan engine be improved to find more vulns? Sure. That's really not that big a deal; technology can always be improved.<br />But, regarding holding merchants to a higher standard; therein is the whole point of this debate. <br />Anyone can throw a badge on a site. <br />But what happens when the site proves vulnerable is the key. I'll be candid here: I don't give a damn about the merchant at that point; it's the consumer who is at risk and needs something better from McAfee and their peers.<br />So, here begins a different approach. I know that making changes at a company the size of McAfee can be likened to the three miles it takes to turn around an aircraft carrier. I'm willing to work with them, and allow for a positive outcome.<br />I have been told that, in two or three weeks, we can expect a published standard, that clearly defines exactly what the McAfee Secure product offering adheres to, inclusive of their expectations for merchant remediation timelines, potential badge downgrades for unresolved vulnerabilities, and hopefully even a more clear stance on XSS.<br />I have been told that I will have the opportunity to discuss this standard, and invite feedback. Any <a href="http://holisticinfosec.org/content/view/19/29/" target="_blank">standard</a> is better than no standard. <br />I have also been told that this is just the beginning of changes that will lead to more of what I have hoped for in my expectations, over the next 6 months or so.<br />I am hopeful that we can take McAfee at their word, and even if slowly, see a positive outcome.<br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/08/mcirony-unexpected-response-from-mcafee.html&title=McIrony:%20An%20unexpected%20response%20from%20McAfee " title="McIrony: An unexpected response from McAfee ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/08/mcirony-unexpected-response-from-mcafee.html" title="McIrony: An unexpected response from McAfee ">digg</a>]]></content:encoded>
      <pubDate>Sat, 30 Aug 2008 09:04:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mcafee">mcafee</category>
      <category domain="http://securityratty.com/tag/mcafee secure">mcafee secure</category>
      <category domain="http://securityratty.com/tag/negative security research">negative security research</category>
      <category domain="http://securityratty.com/tag/research">research</category>
      <category domain="http://securityratty.com/tag/mcafee secure product">mcafee secure product</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security research community">security research community</category>
      <category domain="http://securityratty.com/tag/information security professional">information security professional</category>
      <category domain="http://securityratty.com/tag/positive outcome">positive outcome</category>
      <source url="http://holisticinfosec.blogspot.com/2008/08/mcirony-unexpected-response-from-mcafee.html">McIrony: An unexpected response from McAfee</source>
    </item>
    <item>
      <title><![CDATA[An "Aw3s0me" Offer?]]></title>
      <link>http://securityratty.com/article/a01a803d8e6e34d9dd9658cbc7dd24b9</link>
      <guid>http://securityratty.com/article/a01a803d8e6e34d9dd9658cbc7dd24b9</guid>
      <description><![CDATA[Yes, it's time for our regular &quot;sites to avoid&quot; update with regards URLs related to this ring of sites asking for MSN login details. Yesterday evening, I received this via MSN




Interestingly, this...]]></description>
      <content:encoded><![CDATA[
        Yes, it's time for our regular "sites to avoid" update with regards URLs related to <a href="http://blog.spywareguide.com/2008/06/another-site-asking-for-msn-lo.html">this ring of sites</a> asking for MSN login details. Yesterday evening, I received this via MSN:<br /><br /><br /><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="awesomeoffer1.jpg" src="http://blog.spywareguide.com/images/awesomeoffer1.jpg" class="mt-image-none" style="" height="164" width="394" /></span>
<br /><br />Interestingly, this is the first site I've seen promoted on MSN related to this where the site being pushed isn't asking for your login details. Instead, it cycles through a bunch of adverts &amp; promotions instead. Rather worryingly, the domain has been flagged for Phishing.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/awesomeoffer2.html" onclick="window.open('http://blog.spywareguide.com/images/awesomeoffer2.html','popup','width=967,height=482,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/awesomeoffer2-thumb-367x182.jpg" alt="awesomeoffer2.jpg" class="mt-image-none" style="" height="182" width="367" /></a></span><br /> </div><div><div align="center"><br />Click to Enlarge<br /></div><br />In what might be a departure for these websites, there appears to be "real" <a href="http://whois.domaintools.com/aw3s0me-offer.com">Whois data</a> listed for the URL, as opposed the "privacy protected" details I seem to remember being used for all the others.<br /><br />Registrant Contact:<br />&nbsp;&nbsp; TST Management, Inc<br />&nbsp;&nbsp; Jeff Fisher <br />&nbsp;&nbsp; <br />&nbsp;&nbsp; Edificio Magna Corp. 5th Floor, Office 511<br />&nbsp;&nbsp; Ave. Manuel Maria Icaza y Calle 51<br />&nbsp;&nbsp; Panama City, Panama 0000<br />&nbsp;&nbsp; PA<br /><br />I'm sure there'll be another chapter in this ongoing saga soon.<br /></div><div><br /></div>
        
    ]]></content:encoded>
      <pubDate>Tue, 05 Aug 2008 12:52:53 +0000</pubDate>
      <category domain="http://securityratty.com/tag/details">details</category>
      <category domain="http://securityratty.com/tag/msn login details">msn login details</category>
      <category domain="http://securityratty.com/tag/login details">login details</category>
      <category domain="http://securityratty.com/tag/msn">msn</category>
      <category domain="http://securityratty.com/tag/manuel maria icaza">manuel maria icaza</category>
      <category domain="http://securityratty.com/tag/panama city">panama city</category>
      <category domain="http://securityratty.com/tag/panama">panama</category>
      <category domain="http://securityratty.com/tag/edificio magna corp">edificio magna corp</category>
      <category domain="http://securityratty.com/tag/tst management">tst management</category>
      <source url="http://blog.spywareguide.com/2008/08/an-aw3s0me-offer.html">An "Aw3s0me" Offer?</source>
    </item>
    <item>
      <title><![CDATA[Cost/Benefit Analysis of Airline Security]]></title>
      <link>http://securityratty.com/article/033b2789311d93701b77cbecf63c9596</link>
      <guid>http://securityratty.com/article/033b2789311d93701b77cbecf63c9596</guid>
      <description><![CDATA[This report , &quot;Assessing the risks, costs and benefits of United States aviation security measures&quot; by Mark Stewart and John Mueller, is excellent reading: The United States Office of Management and...]]></description>
      <content:encoded><![CDATA[This <a href="http://hdl.handle.net/1959.13/28097">report</a>, "Assessing the risks, costs and benefits of United States aviation security measures" by Mark Stewart and John Mueller, is excellent reading:

<blockquote>The United States Office of Management and Budget has recommended the use of cost-benefit assessment for all proposed federal regulations. Since 9/11 government agencies in Australia, United States, Canada, Europe and elsewhere have devoted much effort and expenditure to attempt to ensure that a 9/11 type attack involving hijacked aircraft is not repeated. This effort has come at considerable cost, running in excess of US$6 billion per year for the United States Transportation Security Administration (TSA) alone. In particular, significant expenditure has been dedicated to two aviation security measures aimed at preventing terrorists from hijacking and crashing an aircraft into buildings and other infrastructure: (i) Hardened cockpit doors and (ii) Federal Air Marshal Service. These two security measures cost the United States government and the airlines nearly $1 billion per year. This paper seeks to discover whether aviation security measures are cost-effective by considering their effectiveness, their cost and expected lives saved as a result of such expenditure. An assessment of the Federal Air Marshal Service suggests that the annual cost is $180 million per life saved. This is greatly in excess of the regulatory safety goal of $1-$10 million per life saved. As such, the air marshal program would seem to fail a cost-benefit analysis. In addition, the opportunity cost of these expenditures is considerable, and it is highly likely that far more lives would have been saved if the money had been invested instead in a wide range of more cost-effective risk mitigation programs. On the other hand, hardening of cockpit doors has an annual cost of only $800,000 per life saved, showing that this is a cost-effective security measure.</blockquote>

From the body:

<blockquote>Hardening cockpit doors has the highest risk reduction (16.67%) at lowest additional cost of $40 million. On the other hand, the Federal Air Marshal Service costs $900 million pa but reduces risk by only 1.67%. The Federal Air Marshal Service may be more cost-effective if it is able to show extra benefit over the cheaper measure of hardening cockpit doors. However, the Federal Air Marshal Service seems to have significantly less benefit which means that hardening cockpit doors is the more cost-effective measure.</blockquote>

Cost-benefit analysis is definitely the way to look at these security measures.  It's hard for people to do, because it requires putting a dollar value on a human life -- something we can't possibly do with our own.  But as a society, it is something we do again and again: when we raise or lower speed limits, when we ban a certain pesticide, when we enact building codes.  Insurance companies do it all the time.  We do it implicitly, because we can't talk about it explicitly.  I think there is considerable value in talking about it.

(Note the table on page 5 of the report, which lists the cost per lives saved for a variety of safety and security measures.)

The final paper will eventually be published in the <i>Journal of Transportation Security</i>.  I never even knew there was such a thing.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=x80u9J"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=x80u9J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=UrhygJ"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=UrhygJ" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Mon, 21 Jul 2008 01:53:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cost-effective">cost-effective</category>
      <category domain="http://securityratty.com/tag/cost-effective security measure">cost-effective security measure</category>
      <category domain="http://securityratty.com/tag/cost">cost</category>
      <category domain="http://securityratty.com/tag/cost-effective measure">cost-effective measure</category>
      <category domain="http://securityratty.com/tag/opportunity cost">opportunity cost</category>
      <category domain="http://securityratty.com/tag/cost-benefit analysis">cost-benefit analysis</category>
      <category domain="http://securityratty.com/tag/additional cost">additional cost</category>
      <category domain="http://securityratty.com/tag/cost-benefit assessment">cost-benefit assessment</category>
      <category domain="http://securityratty.com/tag/benefit">benefit</category>
      <source url="http://www.schneier.com/blog/archives/2008/07/costbenefit_ana.html">Cost/Benefit Analysis of Airline Security</source>
    </item>
    <item>
      <title><![CDATA[Teen Hacks PA School Computer, Gets Tax Info]]></title>
      <link>http://securityratty.com/article/de333b4cbac408c0013a50da9aeecb9f</link>
      <guid>http://securityratty.com/article/de333b4cbac408c0013a50da9aeecb9f</guid>
      <description><![CDATA[A 15 year old student managed to hack into a school computer in Pennsylvania. He got his hands on 2005 tax return information for 41,000 which sent a town meeting for a loop
From DailyLocal dot com...]]></description>
      <content:encoded><![CDATA[<p>A 15 year old student managed to hack into a school computer in Pennsylvania. He got his hands on 2005 tax return information for 41,000 which sent a town meeting for a loop.</p>
<p>From DailyLocal dot com:</p>
<blockquote><p> Borough police arrested a 15-year-old Downingtown West High School freshman on May 21 and charged him with theft by unlawful taking or disposition, computer theft, unlawful duplication and computer trespass.</p>
<p>District administrators learned about the intrusion on May 9, when a student told Downingtown West’s principal that another student might have personal information, Griffin said. But 71 school employees did not learn their 2005 W-2 forms were copied until May 16, and Griffin said this was because district officials had to first perform “due diligence.”</p>
<p>According to police, the data files contained more than 41,000 adult taxpayers’ names and personal information, including Social Security numbers, and more than 15,000 students’ names and personal information. The school district sent out letters to 16,595 residences about the incident.</p>
<p>Eldredge said he received the school district’s letter but believes it’s a dead issue.</p>
<p>“For me, I’m comfortable that nothing was done with the information,” Eldredge said.</p></blockquote>
<p>But, not everyone felt the same.</p>
<blockquote><p>“I have a tremendous objection to anyone but the county having this information,” West Bradford resident Susan Singer said. And if there are instances of identity theft, “I will be more than outraged,” she said.</p></blockquote>
<p>ID theft can scare the best of us at the worst of times.</p>
<p><a href="http://www.dailylocal.com/WebApp/appmanager/JRC/Daily;!819070101?_nfpb=true&#038;_pageLabel=pg_article&amp;r21.pgpath=%2FDLN%2FHome&amp;r21.content=%2FDLN%2FHome%2FTopStoryList_Story_2143738">Article Link</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=D7F6J1"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=D7F6J1" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=fOX9QI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=fOX9QI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=hVPTVi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=hVPTVi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=FgaHti"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=FgaHti" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=kfzczi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=kfzczi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=jFmVYi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=jFmVYi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/303609559" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 03 Jun 2008 06:23:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/tax return information">tax return information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/computer theft">computer theft</category>
      <category domain="http://securityratty.com/tag/theft">theft</category>
      <category domain="http://securityratty.com/tag/identity theft">identity theft</category>
      <category domain="http://securityratty.com/tag/school computer">school computer</category>
      <category domain="http://securityratty.com/tag/unlawful duplication">unlawful duplication</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/303609559/">Teen Hacks PA School Computer, Gets Tax Info</source>
    </item>
    <item>
      <title><![CDATA[Comcast.net not Hacked, DNS Records Hijacked]]></title>
      <link>http://securityratty.com/article/ace2637b5a97afd9b85c7421abe64084</link>
      <guid>http://securityratty.com/article/ace2637b5a97afd9b85c7421abe64084</guid>
      <description><![CDATA[Two days ago in a show off move, the Kryogenics team managed to change the DNS records of Comcast.net , and consequently, redirect traffic to third-party servers, which in this incident only served a...]]></description>
      <content:encoded><![CDATA[<a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp1.blogger.com/_wICHhTiQmrA/SD_ozuzK7cI/AAAAAAAABwI/CWawx617ChE/s1600-h/comcast_net_DNS_hijacked2.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp1.blogger.com/_wICHhTiQmrA/SD_ozuzK7cI/AAAAAAAABwI/CWawx617ChE/s200/comcast_net_DNS_hijacked2.JPG" alt="" id="BLOGGER_PHOTO_ID_5206135669697211842" border="0" /></a>Two days ago in a show off move, the <a href="http://www.scmagazineus.com/Justin-Timberlake-Hilary-Duff-Tila-Tequila-MySpace-profiles-compromised-to-impress-hacker-group/article/99727/">Kryogenics team</a> managed to <a href="http://blogs.zdnet.com/security/?p=1213">change the DNS records of Comcast.net</a>, and consequently, redirect traffic to third-party servers, which in this incident only served a defaced-looking like page, and denied email services to Comcast's millions of email users for a period of three hours.<br /><br />The message they appear to have left at the first place, is actually hosted on third-party servers and reads :<br /><br />"<span style="font-style: italic;">KRYOGENIKS EBK and DEFIANT RoXed COMCAST sHouTz To VIRUS Warlock elul21 coll1er seven</span>"<br /><br />Comcast's changed whois records looked like this, and were restored to their original state approximately three hours later :<br /><br /><span style="font-style: italic;">Administrative Contact:</span> <span style="font-style: italic;"><br />Domain Registrations,<br />Comcast</span> <span style="font-style: italic;"> kryogenicsdefiant@gmail.com</span><br /><span style="font-style: italic;"> Defiant still raping 2k8 ebk</span> <span style="font-style: italic;"> 69 dick<br />tard lane</span> <span style="font-style: italic;"> dildo room</span> <span style="font-style: italic;"><br />PHILADELPHIA, PA 19103</span><br /><span style="font-style: italic;"> US</span> <span style="font-style: italic;"> 4206661870 fax: 6664200187</span><br /><br />The hacked page was loading from the following locations :<br /><strong>freewebs.com/buttpussy69<br /></strong><strong>freewebs.com/kryogeniks911<br />defiants.net/hacked.html<br /></strong><strong><br /><span style="font-weight: normal;"><a href="http://www.dslreports.com/shownews/Comcast-Domain-Hacked-94826?nocomment=1">Comcast's comments</a> :<br /><br />"</span></strong><span style="font-style: italic;">Last night users attempting to access Comcast.net were temporarily redirected to another site by an unauthorized person," he says. "While that issue has been resolved and customers have continued to have access to the Internet and email through services like Outlook, some customers are currently not able to access Comcast.net or Webmail." Douglas says that network engineers continue to work on the issue. "We believe that our registration information at the vendor that registers the Comcast.net domain address was altered, which redirected the site, and is the root cause of today's continued issues as well," he says. "We have alerted law enforcement authorities and are working in conjunction with them.</span>"<strong><span style="font-weight: normal;"><br /><br /><a href="http://blog.wired.com/27bstroke6/2008/05/comcast-servers.html">Network Solutions comments</a> :<br /><br />"</span></strong><span style="font-style: italic;">Somebody was able to log into the account using the username and password. It was an unauthorized access," said spokeswoman Susan Wade. "It wasn't like somebody hacked into it. The Network Solutions account was not hacked.  "They ping us and say this is my domain and say, 'I'd like to reset my password,'" Wade said. "It could have been compromised through e-mail. They could have gotten it if they acted as the customer. We're not clear.</span>"<strong><span style="font-weight: normal;"><br /><br />"Pinging a domain registrar" has been around since the early days of the Internet, and it's obviously still possible to socially engineer one in 2008. A recently released ICANN advisory on the topic of <a href="http://blogs.zdnet.com/security/?p=1208">registrar impersonation phishing attacks</a> provides a decent overview of the threat, and in Comcast's case, I think someone impersonated Comcast in front of Network Solutions compared to the other way around, namely someone phished the person possessing the accounting data at Comcast, by making them think it's Network Solutions contacting them.<br /><br />With Comcast.net now back to normal</span><span style="font-weight: normal;">, the possibilities for abusing the redirected traffic given that the content was loading from web sites they controlled are pretty evident. And despite that there are speculations <a href="http://torrentfreak.com/comcast-hacked-in-bittorrent-throttling-packback-080529/">the hijack is courtesy of the BitTorrent supporters</a>, in this case, the motivation behind this seem to have been to prove that it's possible<span style="font-weight: bold;">.</span></span><br /></strong><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1TztaH"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1TztaH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1sFC8H"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1sFC8H" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=JboENh"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=JboENh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=yPp0jh"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=yPp0jh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=NrHziH"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=NrHziH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=0OTJVH"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=0OTJVH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2wuH3h"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2wuH3h" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/301254749" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 30 May 2008 03:58:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/comcast">comcast</category>
      <category domain="http://securityratty.com/tag/net">net</category>
      <category domain="http://securityratty.com/tag/access comcast">access comcast</category>
      <category domain="http://securityratty.com/tag/network solutions account">network solutions account</category>
      <category domain="http://securityratty.com/tag/network solutions">network solutions</category>
      <category domain="http://securityratty.com/tag/net domain address">net domain address</category>
      <category domain="http://securityratty.com/tag/network solutions comments">network solutions comments</category>
      <category domain="http://securityratty.com/tag/domain">domain</category>
      <category domain="http://securityratty.com/tag/domain registrations">domain registrations</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/301254749/comcastnet-not-hacked-dns-records.html">Comcast.net not Hacked, DNS Records Hijacked</source>
    </item>
    <item>
      <title><![CDATA[15-year-old "hacks" Downingtown Area School District]]></title>
      <link>http://securityratty.com/article/f3f8b9055e597e02c075ea58f03f36c2</link>
      <guid>http://securityratty.com/article/f3f8b9055e597e02c075ea58f03f36c2</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
5/16/08

Organization
Downingtown Area School District

Contractor/Consultant/Branch
None

Victims
Staff members and county taxpayers

Number Affected
71...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/dasd.jpg" align="right" height="108" width="117"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>5/16/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.dasd-adm.org/">Downingtown Area School District</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Staff members and county taxpayers<br><br><span style="font-weight: bold;">Number Affected:</span><br>"71 teachers" and "several thousand tax payers"<br><br><span style="font-weight: bold;">Types of Data:</span><br>W-2 forms, Social Security numbers, and home addresses<br><br><span style="font-weight: bold;">Breach Description:</span><br>"DOWNINGTOWN, Pa. (CBS 3) ? Authorities are investigating the theft of personal information from a computer in a Chester County school district.&nbsp; Downingtown Area School District officials said that a 15-year-old student gained access to files on a computer at Downingtown West High School on May 9."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://cbs3.com/topstories/data.theft.computer.2.725949.html">CBS Channel 3 News</a> <br><a href="http://www.philly.com/inquirer/education/20080517_Student_hacks_district_files.html">The Philadelphia Inquirer</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>CBS Channel 3 News<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>DOWNINGTOWN, Pa. (CBS 3) ? Authorities are investigating the theft of personal information from a computer in a Chester County school district.<br><br>Downingtown Area School District officials said that a 15-year-old student gained access to files on a computer at Downingtown West High School on May 9.<br><span style="font-style: italic;">[Evan] I hope school district officials are embarrassed.&nbsp; Do you think that this kid used exceptional skill?&nbsp; I would guess that the school information was a pretty easy target.</span><br style="font-style: italic;"><br>Numerous files containing the personal information of 70 staff members and several thousand tax payers were apparently copied and distributed to other students.<br><span style="font-style: italic;">[Evan] The information was "distributed to other students"?&nbsp; Ouch.&nbsp; Why does the school possess personal information belonging to several thousand tax payers?</span><br style="font-style: italic;"><br>The files apparently contained salary information and social security numbers.<br><br>Police said the students involved in the incident have been identified and the data was safely recovered.<br><span style="font-style: italic;">[Evan] Were all copies of the data safely recovered?&nbsp; How would you be certain?&nbsp; Once information has been compromised, how do you un-compromise it?&nbsp; I don't think you can.</span><br style="font-style: italic;"><br>The district is working to determine how far the breach reached and secure their network from future abuse.<br><span style="font-style: italic;">[Evan] People like to put information security into a nice little package.&nbsp; You can't.&nbsp; It's more than that, and the solutions to the school district's information security problems are more than determining the extent of this breach and securing their network.</span><br style="font-style: italic;"><br>Officials believe the student was just attempting to see if he could infiltrate the network, not identity theft.<br><span style="font-style: italic;">[Evan] This may or may not be true, but what about the other students that received copies?</span><br style="font-style: italic;"><br>As a precaution, all staff members were notified of the incident and told to check their personal data.<br><br>"We are still early in the investigation and cannot provide further details," Lt. Steven J. Plaugher of the Downingtown Police Department said in a statement last night. "No arrests have been made at this time."<br><br>"We just determined a week ago what happened," said Patricia McGlone, spokeswoman for the district. "The school board will go forward with a disciplinary hearing, which will be separate from the police investigation."<br><br>It is unclear if the student will face charges.<br><br>The incident marks the second time private information has been obtained by a student at the school. Officials said a student was charged after hacking the system in December 2007.<br><span style="font-style: italic;">[Evan] This should be a sign, eh?&nbsp; Two incidents in six months.&nbsp; Do you suppose the district determined "how far the breach reached and secure their network from future abuse" in that case too?</span><br style="font-style: italic;"><br><span style="font-weight: bold;">Commentary:</span><br>This breach reminds of the "<a href="http://breachblog.com/2008/04/15/williamsville.aspx">Students breach Williamsville Central School District security</a>" posting we made on April 15th.&nbsp; I think these two cases are very similar.&nbsp; School districts across the country seem to collect and poorly protect unnecessary personal information. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/05/18/dasd.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Sun, 18 May 2008 17:54:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/district">district</category>
      <category domain="http://securityratty.com/tag/school">school</category>
      <category domain="http://securityratty.com/tag/school district officials">school district officials</category>
      <category domain="http://securityratty.com/tag/school district">school district</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/school board">school board</category>
      <category domain="http://securityratty.com/tag/salary information">salary information</category>
      <category domain="http://securityratty.com/tag/school information">school information</category>
      <source url="http://breachblog.com/2008/05/18/dasd.aspx">15-year-old "hacks" Downingtown Area School District</source>
    </item>
    <item>
      <title><![CDATA[A Small Rant About Conference/Journal Papers and Timestamps]]></title>
      <link>http://securityratty.com/article/0e1fd8e2a2309dddd8dd10e93b044065</link>
      <guid>http://securityratty.com/article/0e1fd8e2a2309dddd8dd10e93b044065</guid>
      <description><![CDATA[Why is it that most/all papers published in Journals and/or as part of conferences never have a date/timetamp attached

Its rather a bit frustrating to read a paper you've been sent, or had a link...]]></description>
      <content:encoded><![CDATA[Why is it that most/all papers published in Journals and/or as part of conferences never have a date/timetamp attached?<br /><br />Its rather a bit frustrating to read a paper you've been sent, or had a link for, only to have no idea when/where it was published...<br /><br />Just Friday I was pointed at an article by Dan Geer -<a href="http://www.acmqueue.org/modules.php?name=Content&amp;pa=showpage&amp;pid=436"> http://www.acmqueue.org/modules.php?name=Content&amp;pa=showpage&amp;pid=436 </a><br /><br />Awesome article, but you won't see any real date information on it.  January/February Edition on the ACM Queue.  Which year?  Hmm, can't tell can you, at least not from that page. Hell, the date at the top is the date you loaded the page, not the date of the article.  More than a little frustrating.<br /><br />Ok, rant mode off.  The next post will probably be about the article above.<img src="http://feeds.feedburner.com/~r/SecurityRetentive/~4/289140715" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 12 May 2008 16:18:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/article">article</category>
      <category domain="http://securityratty.com/tag/awesome article">awesome article</category>
      <category domain="http://securityratty.com/tag/page">page</category>
      <category domain="http://securityratty.com/tag/idea whenwhere">idea whenwhere</category>
      <category domain="http://securityratty.com/tag/journals andor">journals andor</category>
      <category domain="http://securityratty.com/tag/mostall papers">mostall papers</category>
      <category domain="http://securityratty.com/tag/acm queue">acm queue</category>
      <category domain="http://securityratty.com/tag/januaryfebruary edition">januaryfebruary edition</category>
      <category domain="http://securityratty.com/tag/rant mode">rant mode</category>
      <source url="http://feeds.feedburner.com/~r/SecurityRetentive/~3/289140715/small-rant-about-conferencejournal.html">A Small Rant About Conference/Journal Papers and Timestamps</source>
    </item>
    <item>
      <title><![CDATA[Stolen General Internal Medicine laptop exposes nearly 12,000]]></title>
      <link>http://securityratty.com/article/2389b565fa0d63529610bd3f479ba13f</link>
      <guid>http://securityratty.com/article/2389b565fa0d63529610bd3f479ba13f</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
4/25/08

Organization
General Internal Medicine of Lancaster (PA

Contractor/Consultant/Branch
None

Victims
Patients

who visited the office of General...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/gim.jpg" align="right" height="133" width="122"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>4/25/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.genintmed.com/">General Internal Medicine of Lancaster (PA)</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Patients*<br><br><font size="1">*"who visited the office of General Internal Medicine of Lancaster, 2301 Columbia Ave., from 2005 through 2007"</font><br><br><span style="font-weight: bold;">Number Affected:</span><br>"nearly 12,000"<br><br><span style="font-weight: bold;">Types of Data:</span><br>Names, addresses, telephone and Social Security numbers<br><br><span style="font-weight: bold;">Breach Description:</span><br>"EAST HEMPFIELD TOWNSHIP, Pa. -- A laptop stolen from a doctors office containing the social security numbers of patients and office staff was stolen recently in East Hempfield Township, Lancaster County."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.wgal.com/news/16008321/detail.html">WGAL Channel 8 News</a> <br><a href="http://articles.lancasteronline.com/local/4/220386">Lancaster Intelligencer Journal</a> <br><a href="http://www.genintmed.com/fraud_alert.htm">General Internal Medicine of Lancaster</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>General Internal Medicine of Lancaster (PA)<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>EAST HEMPFIELD TOWNSHIP, Pa. -- A laptop stolen from a doctors office containing the social security numbers of patients and office staff was stolen recently in East Hempfield Township, Lancaster County.<br><span style="font-style: italic;">[Evan] Why do we store personal (and other confidential) information on poorly secured laptops?&nbsp; Why, why, why?</span><br><br>A medical practice in East Hempfield Township is contacting nearly 12,000 of its patients to notify them that a computer was stolen from the office April 17<br><br>"We're just sick about this," said practice manager Lois Summers. "We know that the computer didn't contain the information of all (12,000) patients, but we notified everyone we saw during that three-year period just to be safe."<br><span style="font-style: italic;">[Evan] The organization is not providing (as far as I can tell) fraud alert or credit monitoring, but the costs are probably still significant.&nbsp; 12,000 mailings has a hard cost and is pretty easy to quantify.&nbsp; The price involved with lost confidence and visits is harder to nail down.</span><br><br>office workers on April 17 were taking paper records bearing basic patient information and scanning them into a laptop computer so the records could then be transferred to a disk.<br><span style="font-style: italic;">[Evan] Even in a small scale project it is important to evaluate risks EARLY on in the process, before work starts.</span><br><br>After that process was completed, the office planned to burn the paper records.<br><br>no medical information about patients was compromised.<br><br>The computer contained the names, addresses, telephone numbers and Social Security number s of many of the patients who visited the office of General Internal Medicine of Lancaster, 2301 Columbia Ave., from 2005 through 2007.<br><br>East Hempfield Township police said someone stole the computer from an unlocked conference room inside the Physicians Alliance office building on Columbia Avenue last week.<br><br>An employee left the area where the scanning was being done for a brief period the morning of April 17. When that employee returned, Summers said, the laptop was gone.<br><span style="font-style: italic;">[Evan] It only takes a second or two for a thief to nab a mobile device.&nbsp; People think that it won't happen to them until it does.&nbsp; Then it's like "@^ @%*#"!&nbsp; Understand that these things will happen.&nbsp; We don't know when.&nbsp; We don't know how.&nbsp; We don't know where.&nbsp; Many times the hardware costs are a write-off, but what is the cost of personal information for which you are not the owner?&nbsp; We can take steps to significantly reduce the risk of data exposure.</span><br><br>Police said they suspect whoever stole the laptop wanted the computer more than the information on it.<br><span style="font-style: italic;">[Evan] Sure.</span><br><br>Investigators also said the personal information is not easy to access.<br><span style="font-style: italic;">[Evan] "Not easy" is subjective.&nbsp; If the information was only protected by an operating system password, then the information is likely very easy to access.</span><br><br>"Obviously, this was not a secure system we had and it will never be done again in this office," Summers said. "We need a secure (computer) drive that cannot be removed from the office."<br><span style="font-style: italic;">[Evan] Excellent quote, "Obviously, this was not a secure system".&nbsp; Lois Summers then goes on to address physical security of the drive itself.&nbsp; Physical security is very important, but it should be noted that logical security (biometrics, encryption, etc.) are equally as important.</span><br><br>General Internal Medicine of Lancaster located in the office building sent a letter to patients to alert them of what happened.<br><br>Anyone with questions is urged to call General Internal Medicine at 397-2738.<br><br><span style="font-weight: bold;">Commentary:</span><br>The General Internal Medicine of Lancaster web site prominently displayed a "Fraud Alert" graphic in the middle of the home page.<br><br><img src="http://images.quickblogcast.com/95781-88451/gimalert.jpg" border="0" width="184"><br><br>I appreciate organizations that do not hide the fact that personal information (entrusted to them) has been compromised.&nbsp; Losing the information causes enough stress for victims.&nbsp; General Internal Medicine does a good job of openly admitting the breach and providing information. Their "Fraud Alert" page even provides a link to a copy of the East Hempfield Township <a href="http://www.genintmed.com/police_report.htm">police report</a>.&nbsp; I get a real sense that the organization feels terrible about the breach and has taken steps to mend the relationship with patients.&nbsp; I don't get this sense from many breaches.<br><br>Unfortunately the information security practices at General Internal Medicine that led to this breach are commonplace in many organizations of all sizes, in many industries. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/05/05/gim.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Mon, 05 May 2008 08:17:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/internal medicine">internal medicine</category>
      <category domain="http://securityratty.com/tag/office">office</category>
      <category domain="http://securityratty.com/tag/doctors office">doctors office</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/office staff">office staff</category>
      <category domain="http://securityratty.com/tag/basic patient information">basic patient information</category>
      <category domain="http://securityratty.com/tag/east hempfield township">east hempfield township</category>
      <category domain="http://securityratty.com/tag/physicians alliance office">physicians alliance office</category>
      <source url="http://breachblog.com/2008/05/05/gim.aspx">Stolen General Internal Medicine laptop exposes nearly 12,000</source>
    </item>
    <item>
      <title><![CDATA[$160 Billion Robotic Army Network Passes First Big Test. Kinda.]]></title>
      <link>http://securityratty.com/article/6bb6208ef347d0e269a0e843e5740d09</link>
      <guid>http://securityratty.com/article/6bb6208ef347d0e269a0e843e5740d09</guid>
      <description><![CDATA[A van full of insurgents speeds through the desert. They do not notice a series of networked ground sensors that have begun tracking their every move
Hovering somewhere overhead, a tiny robot points...]]></description>
      <content:encoded><![CDATA[<p>A van full of insurgents speeds through the desert. They do not notice a series of networked ground sensors that have begun tracking their every move.</p>

<p>Hovering somewhere overhead, a tiny robot points its camera at the van and takes note of its color scheme and markings. An even bigger drone, thousands of feet above its hovering kin, maintains a God’s-eye vigil on the whole hunt.</p>

<p>Everything these robots see is radioed to monitors thousands of miles away -- and into the targeting systems of a B-52 bomber winging, silent and nearly invisible, several miles overhead.</p>

<p>This scenario, played out at a remote Nevada facility last week, was the first major test of the Army’s $160-billion, 20-year plan to build a high-tech family of networked robots and hybrid-electric armored vehicles. The “Future Combat Systems” program, co-managed by Boeing and consultants SAIC, aims to equip roughly a third of the Army with 14 new vehicle types that are connected constantly to a vast communications net.</p>

<p>The theory behind the FCS is that dispersed, intelligent robotic systems plugged into a universal communications network can help small numbers of U.S. troops riding in new vehicles to control huge swaths of terrain. Any ship, airplane or tank fitted with the FCS network devices will be able to see everything the others see.</p>

<p>The SkyNet-like network and dynamic coordination “is the most important thing,” Brigadier General James Terry says. </p>

<p>This is “a big deal for joint fires,” Army spokesman Paul Mehney told Wired.com. </p>

<p>“Joint fires” is mil-speak for getting all the military services to share info and coordinate their attacks. That kind of teamwork is a big factor in the U.S. military’s combat prowess. And if FCS works out as planned, the five U.S. military branches will team up better than ever.</p>

<p>Did the test work? Kinda.</p>

<p>The robots spotted the van; their targeting data bounced to a nearby unit of specially-equipped Humvees, then across the network to an Air Force intelligence cell in Langley, Virginia, then back to the B-52 -- all in just seconds. The bomber simulated dropping a guided bomb to “destroy” the van. </p>

<p>The Nevada test proved it was possible, according to Mehney. </p>

<p>But one critic says the test essentially was rigged -- that the conditions were too easy.</p>

<p>“There is ‘works’ and then there is ‘works,’” John Pike, an analyst with Globalsecurity,org, told Wired.com. </p>

<p>“A considerable fraction of the FCS network hardware does not currently exist,” Pike said. And the integration of that hardware that does exist has been touch-and-go.</p>

<p>In February, when testers “flipped the switch” for the first time on the network radios, there was a collective sigh of relief that the radios even worked -- this according to one FCS insider who spoke on background.</p>

<p>Last week’s desert test comes at a critical time for Future Combat Systems. Mounting criticism from the GAO plus the growing cost of fixing and upgrading the Army’s current war-weary vehicle fleet -- $120 billion over 10 years, according to the GAO -– has put the squeeze on the futuristic program. “It is not yet clear if or when the Army and [its contractors] can develop, build, and demonstrate the … network,” the Government Accountability Office reported in March.</p>

<p>One powerful congressman, nominally a supporter of FCS, has proposed injecting extra money into the program in order to rescue some of its technologies before canceling the rest.</p>

<p>Rep. John Murtha (D-PA), chair of the defense appropriations subcommittee, promised an extra $20 billion this year for FCS, provided the Army could use the money to wrap up the program quickly. “We need to accelerate FCS if we ever want to see anything accomplished,” Matt Mazonkey, a Murtha staffer, told Wired.com. </p>

<p>The Army is still preparing its response to Murtha’s query, Mehney said. Regardless, the service’s position on FCS has never wavered. The Army says that FCS is on-budget, on-schedule, and with continued funding will deliver on its promises to connect the ground service to itself and to all the other military branches.</p>

<p>And to ensure smooth progress despite a combined $900 million budget cut last year, the Army this month asked Congress to “re-appropriate” $250 million of other Army funds into FCS coffers. </p><br style="clear: both;"/>
      <a href="http://www.pheedo.com/click.phdo?s=60fb2ddae35439be877b98960768dcc2"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=60fb2ddae35439be877b98960768dcc2"/></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=60fb2ddae35439be877b98960768dcc2" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=EouXcG"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=EouXcG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=f0GkJg"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=f0GkJg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=KpPnsg"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=KpPnsg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=glEASG"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=glEASG" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=X7WHYG"><img src="http://feeds.wired.com/~f/wired/politics/security?i=X7WHYG" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=rpxZig"><img src="http://feeds.wired.com/~f/wired/politics/security?i=rpxZig" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=TyYySg"><img src="http://feeds.wired.com/~f/wired/politics/security?i=TyYySg" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=Zjk1YG"><img src="http://feeds.wired.com/~f/wired/politics/security?i=Zjk1YG" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/281164411" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/281164412" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 30 Apr 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/fcs network devices">fcs network devices</category>
      <category domain="http://securityratty.com/tag/fcs">fcs</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/fcs network hardware">fcs network hardware</category>
      <category domain="http://securityratty.com/tag/test">test</category>
      <category domain="http://securityratty.com/tag/radios">radios</category>
      <category domain="http://securityratty.com/tag/network radios">network radios</category>
      <category domain="http://securityratty.com/tag/army">army</category>
      <category domain="http://securityratty.com/tag/fcs coffers">fcs coffers</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/281164412/robots_army">$160 Billion Robotic Army Network Passes First Big Test. Kinda.</source>
    </item>
  </channel>
</rss>
