<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: pennsylvania]]></title>
    <link>http://securityratty.com/tag/pennsylvania</link>
    <description></description>
    <pubDate>Tue, 03 Jun 2008 06:23:32 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[The Importance of Advance Planning in Executive Protection]]></title>
      <link>http://securityratty.com/article/e1d474ffbd2af02b7c262a8172d013f8</link>
      <guid>http://securityratty.com/article/e1d474ffbd2af02b7c262a8172d013f8</guid>
      <description><![CDATA[I was delighted to see the Herald Standard quoting an executive/close protection agent regarding the importance of Advance work

Sy Alli is an E.P./C.P. team leader for &quot;Limited Brands Inc.,&quot; and was...]]></description>
      <content:encoded><![CDATA[I was delighted to see the <a href="http://www.heraldstandard.com/site/news.cfm?newsid=20151834&BRD=2280&PAG=461&dept_id=480247&rfi=6">Herald Standard </a>quoting an executive/close protection agent regarding the importance of Advance work.<br /><span id="fullpost"><br />Sy Alli is an E.P./C.P. team leader for "Limited Brands Inc.," and was speaking at the California University of Pennsylvania's 2nd annual conference on Corporate and Homeland Security.<br /><br />Mr. Alli was describing a previous trip to Indonesia where he was in charge of the advance to make sure everything was in place before the Principal arrived out with the other protective agents.  Very accurately, he described the need to cover every minute detail from the routes of travel to the alternative routes and to include such important features as local hospitals should medical treatment be needed.<br /><br />Another important point highlighted was the need for agents to have access to contacts in different countries who could assist with logistics, general and specialized support on the ground, current political situations, etc.  <br /><br />Far too often I am approached by security persons (and not even all are qualified/trained in executive or close protection)who find out that we may have overseas work and want to be included.  On some occassions, those requesting to be included on the detail did not even have a current passport!<br /><br />If you are serious about making a career out of this line of work, you owe it to yourself to do your homework.  Over the years I have developed hundreds of contacts all over the world who will respond immediately and who can be trusted to support us in any number of situations and scenarios.  <br /><br />This took a lot of preparing and involved constant contact.  It is not something that you throw together a day before your client is scheduled to arrive in a country.  If you have people in different parts of the country, or world if you wish to work globally, who can assist when you are in need, you will be able to facilitate your client in a way that will not only gain his/her admiration, but will undoubtedly cement your position in that client's security detail.<br /><br />In these unsure times, there is a lot to be said for knowing your job is safe for the foreseeable future.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 12 Oct 2008 16:10:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/detail">detail</category>
      <category domain="http://securityratty.com/tag/security detail">security detail</category>
      <category domain="http://securityratty.com/tag/current political situations">current political situations</category>
      <category domain="http://securityratty.com/tag/advance">advance</category>
      <category domain="http://securityratty.com/tag/situations">situations</category>
      <category domain="http://securityratty.com/tag/2nd annual conference">2nd annual conference</category>
      <category domain="http://securityratty.com/tag/gain hisher admiration">gain hisher admiration</category>
      <category domain="http://securityratty.com/tag/agents">agents</category>
      <category domain="http://securityratty.com/tag/routes">routes</category>
      <source url="http://www.thebulletproofblog.com/2008/10/importance-of-advance-planning-in.html">The Importance of Advance Planning in Executive Protection</source>
    </item>
    <item>
      <title><![CDATA[The Pentagon's World of Warcraft Movie-Plot Threat]]></title>
      <link>http://securityratty.com/article/b60783b0204251f583fde52e625be0be</link>
      <guid>http://securityratty.com/article/b60783b0204251f583fde52e625be0be</guid>
      <description><![CDATA[In a presentation that rivals any of my movie-plot threat contest entries, a Pentagon researcher is worried that terrorists might plot using World of Warcraft: In a presentation late last week at the...]]></description>
      <content:encoded><![CDATA[<p>In a presentation that rivals any of my movie-plot threat contest entries, a Pentagon researcher is worried that <a href="http://machinist.salon.com/blog/2008/09/16/warcraft/">terrorists might plot</a> using World of Warcraft:</p>

<blockquote>In a presentation late last week at the Director of National Intelligence Open Source Conference in Washington, Dr. Dwight Toavs, a professor at the Pentagon-funded National Defense University, gave a bit of a primer on virtual worlds to an audience largely ignorant about what happens in these online spaces. Then he launched into a scenario, to demonstrate how a meatspace plot might be hidden by in-game chatter.

<blockquote>In it, two World of Warcraft players discuss a raid on the "White Keep" inside the "Stonetalon Mountains." The major objective is to set off a "Dragon Fire spell" inside, and make off with "110 Gold and 234 Silver" in treasure. "No one will dance there for a hundred years after this spell is cast," one player, "war_monger," crows.</blockquote>

<p>Except, in this case, the White Keep is at 1600 Pennsylvania Avenue. "Dragon Fire" is an unconventional weapon. And "110 Gold and 234 Silver" tells the plotters how to align the game's map with one of Washington, D.C.</blockquote></p>

<p>I don't know why he thinks that the terrorists will use World of Warcraft and not some other online world.  Or Facebook.  Or Usenet.  Or a chat room.  Or e-mail.  Or the telephone.  I don't even know why the particular form of communication is in any way important.</p>

<p>The article ends with this nice paragraph:</p>

<blockquote>Steven Aftergood, the Federation of the American Scientists analyst who's been following the intelligence community for years, wonders how realistic these sorts of scenarios are, really. "This concern is out there. But it has to be viewed in context. It's the job of intelligence agencies to anticipate threats and counter them. With that orientation, they're always going to give more weight to a particular scenario than an objective analysis would allow," he tells Danger Room. "Could terrorists use Second Life? Sure, they can use anything. But is it a significant augmentation? That's not obvious. It's a scenario that an intelligence officer is duty-bound to consider. That's all."</blockquote>

<p>My guess is <a href="http://www.schneier.com/blog/archives/2008/03/searching_for_t.html">still</a> that some clever Pentagon researchers have figured out how to play World of Warcraft on the job, and they're not giving that perk up anytime soon.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=t3Y6L"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=t3Y6L" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=zsKzL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=zsKzL" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 09:29:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/warcraft">warcraft</category>
      <category domain="http://securityratty.com/tag/plot">plot</category>
      <category domain="http://securityratty.com/tag/play world">play world</category>
      <category domain="http://securityratty.com/tag/warcraft players discuss">warcraft players discuss</category>
      <category domain="http://securityratty.com/tag/movie-plot threat">movie-plot threat</category>
      <category domain="http://securityratty.com/tag/online world">online world</category>
      <category domain="http://securityratty.com/tag/meatspace plot">meatspace plot</category>
      <category domain="http://securityratty.com/tag/dragon fire">dragon fire</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/the_pentagons_w.html">The Pentagon's World of Warcraft Movie-Plot Threat</source>
    </item>
    <item>
      <title><![CDATA[MBTA vs MIT students case continues]]></title>
      <link>http://securityratty.com/article/4eeed89c9d2338f565503a6939c3100f</link>
      <guid>http://securityratty.com/article/4eeed89c9d2338f565503a6939c3100f</guid>
      <description><![CDATA[A hearing will be held in Boston tommorow to decide whether or not the restraining order gagging the MIT students from talking about the vulnerabilities they have found should be lifted. Even though...]]></description>
      <content:encoded><![CDATA[<p>A hearing will be held in Boston tommorow to decide whether or not the restraining order gagging the MIT students from talking about the vulnerabilities they have found should be lifted. Even though the Defcon presentation is widely available and the MBTA disclosed the &#8220;Confidential&#8221; memo from the MIT students in their court filings, they are seeking a permanent speech injunction.  An august group of computer scientists has <a href="http://cryptome.org/mbta-v-zack/mbta-v-profs.pdf">signed a letter</a> which will be entered into the record for the case.  This list includes: Dave Farber of Carnegie Mellon University, Steve Bellovin from Columbia University, David Wagner from UC Berkeley, Dan Wallach from Rice University, Matt Blaze from the University of Pennsylvania, and Bruce Schneier. An excerpt:</p>
<blockquote><p>We write to express our firm belief that research on security vulnerabilities, and the sensible publication of the results of the research, are critical for scientific advancement, public safety and a robust market for secure technologies. Generally speaking, the norm in our field is that researchers take reasonable steps to protect the individuals using the systems studied. We understand that the student researchers took such steps with regard to their research, notably by planning not to present a critical element of a flaw they found.  They did this so that their audience would be unable to exploit the security flaws they uncovered. . . .</p>
<p>The restraining order at issue in this case also fosters a dangerous information imbalance. In this case, for example, it allows the vendors of the technology and the MBTA to claim greater efficacy and security than their products warrant, then use the law to silence those who would reveal the technologies&#8217; flaws. In this case, the law gives the public a false sense of security, achieved through law, not technical effectiveness. Preventing researchers from discussing a technology&#8217;s vulnerabilities does not make them go away - in fact, it may exacerbate them as more people and institutions use and come to rely upon the illusory protection. Yet the commercial purveyors of such technologies often do not want truthful discussions of their products&#8217; flaws, and will likely withhold the prior approval or deny researchers access for testing if the law supports that effort. . . .</p>
<p>Yet at the same time that researchers need to act responsibly, vendors should not be granted complete control of the publication of such information, as it appears MBTA sought here. As noted above, vendors and users of such technologies often have an incentive to hide the flaws in the system rather than come clean with the public and take the steps necessary to remedy them.  Thus, while researchers often refrain from publishing the technical details necessary to exploit the flaw, a legal ban on discussion of security flaws, such as that contained in the temporary restraining order, is especially troubling.</p></blockquote>
<p>It will be interesting to see what arguments the MBTA uses to keep the students from speaking on a topic where all the important vulnerability information seems to have already disclosed.  Sure the students haven&#8217;t presented a cookbook exploit tool but they have also stated they have no intention of doing so.</p>
<p>Perhaps the court will investigate what the MBTA&#8217;s and their technology vendors response has been to the MiFare card vulnerabilities that were <a href="http://eprint.iacr.org/2008/166">disclosed responsibly</a>. If there has been no vigorous response to responsibly disclosed vulnerabilities of many months ago how can they say with a straight face that are truly responding to new security information and just need more time.</p>
]]></content:encoded>
      <pubDate>Wed, 13 Aug 2008 18:47:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/technologies flaws">technologies flaws</category>
      <category domain="http://securityratty.com/tag/flaws">flaws</category>
      <category domain="http://securityratty.com/tag/vulnerabilities">vulnerabilities</category>
      <category domain="http://securityratty.com/tag/technologys vulnerabilities">technologys vulnerabilities</category>
      <category domain="http://securityratty.com/tag/mifare card vulnerabilities">mifare card vulnerabilities</category>
      <category domain="http://securityratty.com/tag/students">students</category>
      <category domain="http://securityratty.com/tag/security vulnerabilities">security vulnerabilities</category>
      <category domain="http://securityratty.com/tag/mit students">mit students</category>
      <category domain="http://securityratty.com/tag/mbta">mbta</category>
      <source url="http://www.veracode.com/blog/?p=232">MBTA vs MIT students case continues</source>
    </item>
    <item>
      <title><![CDATA[MBTA vs MIT Students Case Continues]]></title>
      <link>http://securityratty.com/article/064a464f9437ecbf32f46f66c2142979</link>
      <guid>http://securityratty.com/article/064a464f9437ecbf32f46f66c2142979</guid>
      <description><![CDATA[A hearing will be held in Boston tomorrow to decide whether or not the restraining order gagging the MIT students from talking about the vulnerabilities they have found should be lifted. Even though...]]></description>
      <content:encoded><![CDATA[<p>A hearing will be held in Boston tomorrow to decide whether or not the restraining order gagging the MIT students from talking about the vulnerabilities they have found should be lifted. Even though the Defcon presentation is widely available and the MBTA disclosed the &#8220;Confidential&#8221; memo from the MIT students in their court filings, they are seeking a permanent speech injunction.  An august group of computer scientists has <a href="http://cryptome.org/mbta-v-zack/mbta-v-profs.pdf">signed a letter</a> which will be entered into the record for the case.  This list includes: Dave Farber of Carnegie Mellon University, Steve Bellovin from Columbia University, David Wagner from UC Berkeley, Dan Wallach from Rice University, Matt Blaze from the University of Pennsylvania, and Bruce Schneier. An excerpt:</p>
<blockquote><p>We write to express our firm belief that research on security vulnerabilities, and the sensible publication of the results of the research, are critical for scientific advancement, public safety and a robust market for secure technologies. Generally speaking, the norm in our field is that researchers take reasonable steps to protect the individuals using the systems studied. We understand that the student researchers took such steps with regard to their research, notably by planning not to present a critical element of a flaw they found.  They did this so that their audience would be unable to exploit the security flaws they uncovered. . . .</p>
<p>The restraining order at issue in this case also fosters a dangerous information imbalance. In this case, for example, it allows the vendors of the technology and the MBTA to claim greater efficacy and security than their products warrant, then use the law to silence those who would reveal the technologies&#8217; flaws. In this case, the law gives the public a false sense of security, achieved through law, not technical effectiveness. Preventing researchers from discussing a technology&#8217;s vulnerabilities does not make them go away - in fact, it may exacerbate them as more people and institutions use and come to rely upon the illusory protection. Yet the commercial purveyors of such technologies often do not want truthful discussions of their products&#8217; flaws, and will likely withhold the prior approval or deny researchers access for testing if the law supports that effort. . . .</p>
<p>Yet at the same time that researchers need to act responsibly, vendors should not be granted complete control of the publication of such information, as it appears MBTA sought here. As noted above, vendors and users of such technologies often have an incentive to hide the flaws in the system rather than come clean with the public and take the steps necessary to remedy them.  Thus, while researchers often refrain from publishing the technical details necessary to exploit the flaw, a legal ban on discussion of security flaws, such as that contained in the temporary restraining order, is especially troubling.</p></blockquote>
<p>It will be interesting to see what arguments the MBTA uses to keep the students from speaking on a topic where all the important vulnerability information seems to have already disclosed.  Sure the students haven&#8217;t presented a cookbook exploit tool but they have also stated they have no intention of doing so.</p>
<p>Perhaps the court will investigate what the MBTA&#8217;s and their technology vendors response has been to the MiFare card vulnerabilities that were <a href="http://eprint.iacr.org/2008/166">disclosed responsibly</a>. If there has been no vigorous response to responsibly disclosed vulnerabilities of many months ago how can they say with a straight face that are truly responding to new security information and just need more time.</p>
]]></content:encoded>
      <pubDate>Wed, 13 Aug 2008 18:47:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/technologies flaws">technologies flaws</category>
      <category domain="http://securityratty.com/tag/flaws">flaws</category>
      <category domain="http://securityratty.com/tag/vulnerabilities">vulnerabilities</category>
      <category domain="http://securityratty.com/tag/technologys vulnerabilities">technologys vulnerabilities</category>
      <category domain="http://securityratty.com/tag/mifare card vulnerabilities">mifare card vulnerabilities</category>
      <category domain="http://securityratty.com/tag/students">students</category>
      <category domain="http://securityratty.com/tag/security vulnerabilities">security vulnerabilities</category>
      <category domain="http://securityratty.com/tag/mit students">mit students</category>
      <category domain="http://securityratty.com/tag/mbta">mbta</category>
      <source url="http://www.veracode.com/blog/2008/08/mbta-vs-mit-students-case-continues/">MBTA vs MIT Students Case Continues</source>
    </item>
    <item>
      <title><![CDATA[U.S. Arms Dealer Tests Legal Bounds in Middle East Arms Bazaar]]></title>
      <link>http://securityratty.com/article/a494b708fadf3d4f453c6495d8064dc2</link>
      <guid>http://securityratty.com/article/a494b708fadf3d4f453c6495d8064dc2</guid>
      <description><![CDATA[Former congressman Curt Weldon is helping broker deals between Russian and Ukranian weapons suppliers and the Iraqi and Libyan governments as part of his new job with a private American defense...]]></description>
      <content:encoded><![CDATA[<p>
Former congressman Curt Weldon is helping broker deals between Russian and Ukranian weapons suppliers and the Iraqi and Libyan governments as part of his new job with a private American defense consulting firm, Wired.com has learned. 
</p>

<p>
Weldon, who is currently being investigated by the FBI over alleged corruption during his time in office, visited Libya in March to discuss a possible military deal, according to a letter describing the trip from Weldon to <a href="http://www.ds-pa.com/">Defense Solutions</a> CEO Timothy Ringgold. In May, Weldon, together with Ringgold and another company representative, traveled to Moscow to discuss working with Russia's weapons-export agency on arms sales to the Middle East.
</p>

<p>
Both trips were part of the company's effort to tap into the growing -- and often legally murky -- market for selling weapons from former Eastern Bloc countries to the Middle East and Afghanistan.
</p>



<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 250px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/weldon_350px.jpg" width="250px" alt="Curt Weldon">

<div id="caption">

Ex-Rep. Curt Weldon, R-Penn., is helping broker deals between Russian weapons suppliers and the Iraqi and Libyan governments through his company, Defense Solutions.<br />
<em>Photo: H. Rumph Jr/AP</em>

</div> 

</div>

<p>
The Russians want to sell weapons to Iraq directly, but "must go slow on Iraq because of political reasons" and want to work with an "intermediary" like Defense Solutions, CEO Ringgold subsequently wrote to colleagues. "They have not spoken with any American company that can offer the quid pro quo that we can or that has the connections in Russia that we have," he boasted.
</p>



<p>
A few years ago, an American company proposing to sell weapons to Libya might have triggered a congressional hearing. So, too, would have a proposal to conduct arms deals with Russia, which the United States has accused of selling high-tech weapons to Syria and Iran. 
</p>

<p>However, U.S. government efforts to rapidly equip countries like Afghanistan and Iraq -- which have largely Soviet-origin weapons -- have created legal ambiguities and loopholes in export controls that didn't exist in years past and given rise to a new class of arms trade middlemen. So, even though both Libya and the Russian arms export agency are on official U.S. blacklists, government officials and analysts involved in weapons sales say the rules have become unclear as the push to equip allies in the global war on terror has blazed new but uncertain legal ground. 
</p>




<p>
Eagerly stepping into that virgin territory is <a href="http://www.ds-pa.com/">Defense Solutions</a>, a Pennsylvania-based company that is carving out a small but lucrative niche in a new international arms bazaar. The firm boasts as its advisors a number of influential Washington insiders, such as retired General Barry McCaffrey, the former White House drug czar.
</p>

<p>
Helping the firm make key connections is Curt Weldon, a former Republican congressman from Pennsylvania at the center of an FBI investigation into alleged conflicts of interest during his time in office.  Weldon, now a key executive at Defense Solutions, is working with the company to set up these weapons deals.
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/btr_60_350px.jpg" alt="">

<div id="caption">

Defense Solutions has also proposed refurbishing Libya's BTR-60 armored personnel carriers, according to a sales proposal seen by Wired.com. Defense Solutions denies drafting a sales proposal to Libya.

</div> 

</div>

<p>
It's an unusual, if not an entirely unexpected chapter for Weldon, whose time in office included frequent trips to Russia. As an influential member of the House Armed Services Committee, Weldon pushed for multibillion-dollar defense programs, like ballistic missile defense, and earned a reputation as a foreign policy gadfly, boasting of his contacts with officials in nations labeled by the administration as "rogue states" such as Libya and North Korea. Weldon's wild claims about a 9/11 cover-up and his sensationalist book warning of an Iranian terror plot, sometimes earned him official scorn and public ridicule, but it was accusations that he steered contracts to Eastern European businesses linked to his daughter's lobbying firm that drew the government's attention.
</p>


<!--pagebreak-->
<p>
Weldon was voted out of office in 2006 just weeks after the FBI raided his daughter's home, and that of one of her associates.
</p>

<p>
Weldon did not respond to e-mails and phone requests to be interviewed or comment for this article. But in a 2006 interview, before the FBI probe was public, Weldon spoke enthusiastically about setting up a "front company" to work with the Russian arms agency, Rosoboronexport. Weldon hoped this company could sell weapons to the Middle East, and other regions, particularly to countries where the U.S. has strained relations. He claimed the director of Rosoboronexport approached him to work with "an American company that would act as a front for weapons these nations want to buy."
</p>

<p>
Weldon called the proposal an "unbelievable offer."
</p>

<p>
The administration, he acknowledged at the time, did not welcome the idea of an American company selling Russian weapons to potentially unfriendly countries. But two years later, Weldon, now a private citizen and chief strategic officer for Defense Solutions, appears to be working on precisely that sort of deal. And whether illegal or not, Defense Solutions' business represents a new phenomenon in the international arms trade business.
</p>

<p>
In years past arms brokers -- firms or individuals who serve as middlemen to facilitate weapons sales between countries -- were largely the stuff of spy thrillers. Unlike traditional American defense companies, like Lockheed Martin or Boeing, which typically sell weapons directly to NATO countries or other governments regarded as friendly to the United States, brokers are often small outfits run by people with sometimes questionable experience and reputations they will sell to anyone. One of the most infamous arms brokers, a Russian named <a href="http://en.wikipedia.org/wiki/Victor_Bout">Viktor Bout</a>, is charged by the United States, United Nations, Interpol and others of funneling arms to terrorists and rebels around the world. He was recently arrested in Thailand. The United States is requesting his extradition on charges of supplying arms to a terrorist organization.
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/bmp_1_350px.jpg" alt="" />

<div id="caption">

Two Marines lower the trim vane on the front of an Iraqi BMP-1 mechanized infantry combat vehicle that was captured during Operation Desert Storm. The American defense consulting firm Defense Solutions has proposed refurbishing Libya's aging fleet of BMP-1s. Defense Solutions denies drafting a sales proposal to Libya.

</div> 

</div>

<p>
But ironically, Iraq has fueled a new market for these professional middlemen; the United States is funneling billions of dollars into modernizing Iraq's army so that the country's government can fend for itself after coalition troops withdraw. And Iraq's largely Soviet-equipped military is a natural market for Eastern European countries brimming with old or out-of-date equipment they would like to unload. The middlemen, in these cases, serve a key role by allowing the U.S. government to do business with an American company, which in turn buys equipment from Eastern Bloc countries in deals worth hundreds of millions of dollars, much of it financed with U.S. taxpayer dollars.
</p>

<p>
One of Defense Solutions' sales -- a deal to sell Hungarian-owed T-72 tanks to Iraq in 2005 -- was typical of these new foreign military sales. But on the more questionable side is the company's plans to work with Rosoboronexport, which is barred from doing business with the U.S. government, and Libya, which is still on the State Department's arms embargo list. 
</p>

<p>
The Eastern European-Middle East arms-brokering business, while in some cases sanctioned by the U.S. government, has run into problems, including outright corruption and quality. Defense contractor Dale Stoffel, the president of Wye Oak Technology, and another American were gunned down in Iraq in December 2004 after Stoffel alleged that the Iraqi Ministry of Defense was involved in a kickback scheme. Like Defense Solutions, the company Stoffel worked for was refurbishing the Iraq's army Eastern Bloc equipment.
</p>

<p>
Another problem is quality. Weapons from the former Soviet Bloc, which the U.S. military euphemistically calls "nonstandard equipment," have been flagged as substandard, acknowledges Brigadier General Charles Luckey, who is in charge of security assistance at <a href="http://www.mnstci.iraq.centcom.mil/">Multi-National Security Transition Command-Iraq</a>. In an interview from Iraq, Brigadier General Luckey said: "One of the frustrating things about buying nonstandard [weapons], is that I'm the guy who has to deal with the fact that some broker I've never heard of allowed weapons to get to Iraq before they were inspected."
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/tank_350px.jpg" alt="" />

<div id="caption">

Defense Solutions is carving a new niche in the arms trade, selling Soviet-made weapons to Middle Eastern countries like Afghanistan and Iraq. Defense Solutions sold Hungarian-owed T-72 tanks to Iraq in 2005.

</div> 

</div>


<p>
In one high-profile case, Iraqi officials alleged that a corrupt firm sold them $400 million in shoddy helicopters from Poland. More recently, a company led by a 21-year-old and a former masseur was offered a U.S. government contract worth nearly $300 million to sell ammunition to Afghanistan. The ammunition turned out to be outdated and of dubious origin and several people connected with the company have been indicted. A congressional investigation concluded that the company, which was on a State Department watch list, was able to take advantage of regulatory loopholes by using middlemen.
</p>

<p>
For those concerned about illicit arms trade, this new wave of weapons deals is rife with the potential for corruption and abuse, but for companies eager to pursue markets once regarded as dubious, it represents a lucrative business opportunity.  The problem in these cases, according to those familiar with arms sales, is that it's no longer clear what's legal and what's not.
</p>
<!--pagebreak-->
<p>
Rachel Stohl, an expert on international arms trade and a senior analyst at Center for Defense Information, says that in many ways, the rush to equip Iraq has led the United States to throw caution to the wind. She points to a report by the Government Accountability Office last year that found that some 190,000 weapons sold to Iraq have gone missing. "I think the reality is we won't know, until way after the fact, about all of these irregularities with the Iraq weapons provision program," she said. "We were providing them all these assault rifles that have gone missing. Why? They were not following the standard procedures that were in place."
</p>

<p>
But Iraq and Afghanistan aren't the only markets available to arms brokers like Defense Solutions. The gradual normalization of relations with Libya opens another door into a quasi-legal area of sales. 
</p>

<p>
Like Iraq, Libya has a substantial arsenal of Soviet-origin military weapons, offering a potential market for brokers working with Russia and other former Soviet states. But even when there's not an outright ban, sales to the Middle East are often fraught with controversy, particularly to countries like Libya, which was under international sanction for more than a decade. Even as sanctions against it have been lifted, European companies proposing to sell arms to Libya have faced steep criticism, particularly since the country is still ruled by dictator Muammar Gaddafi, who took power in a military coup in 1969. 
</p>

<p>
While the United States lifted Libya's "state sponsor of terrorism" designation in 2006, other restrictions, such as on the sale of arms, remain in place. A State Department spokesperson confirmed that exports of "lethal munitions" to Libya, such as tanks or related equipment, are still banned, although sales of nonlethal equipment are now allowed on a case-by-case basis.
</p>

<p>
In late March, Weldon traveled to Libya for a weeklong trip at the invitation of the <a href="http://gdf.org.ly/index.php?lang=ar&Page=101&lang=en">Gaddafi Foundation</a>, a group run by the son of Libya's leader, and the chairman of Libya's foreign affairs committee, according to <a href="http://blog.wired.com/defense/files/libya_trip_report.doc">the report he sent to Defense Solutions</a> (.pdf), a copy of which was obtained by Wired.com. The trip reports states: "Agreement reached for Weldon to quickly return to Libya for meetings with son [of Libyan leader Gaddafi] Morti regarding defense and security cooperation."
</p>

<p>
A document dated April 16, just two weeks after Weldon's trip, outlines Defense Solutions' proposal to Libya to refurbish the country's fleet of armored vehicles, including its T-72 tanks, BMP-1 infantry fighting vehicles, and BTR-60 armored personnel carriers. A copy of the sales proposal, also provided to Wired.com, is on Defense Solutions' letterhead, appears to bear the signature of company CEO Timothy Ringgold, and is addressed to Libya's defense procurement council. "Defense Solutions is committed to delivering a full end-to-end solution to its clients," the proposal states. "Besides refurbishing these vehicles, we are capable of providing a full logistics support package, including a two year supply of spare parts, maintenance and repair services, and operator, maintenance, and repair training."
</p>

<p>
In an interview with Wired.com, Ringgold admitted that he's interested in doing business in Libya and confirms receiving Weldon's trip report from Libya, but denies drafting or signing an arms-sale proposal. "I've never made such a document to Libya," Ringgold insisted, after being read the proposal, and told that his signature is on it.
</p>

<p>
In addition to the Libyan arms-deal document, Wired.com has also reviewed copies of e-mails from Ringgold discussing the Libyan deal.
</p>

<p>
While Ringgold denies proposing an arms sale to Libya, he is open about speaking with Rosoboronexport, which has been on a U.S. government sanctions list since 2006, after the Russian state agency allegedly violated the Iran and Syria Nonproliferation Act. An April e-mail provided to Wired.com describes Ringgold, Weldon and Stephan Minikes, a senior advisor to Defense Solutions and a former ambassador, meeting with Rosoboronexport. The conversations included a number of potential deals, including supplying Mi-17 helicopters to Afghanistan and spare parts for Iraq's infantry fighting vehicles. Ringgold wrote to colleagues following the visit, describing the meetings as a "spectacular success," saying the Russian agency "has the ability to undercut all cost proposals from brokers."
</p>

<p>
Ringgold confirmed those discussions and said that his company has sought to do business with Rosoboronexport. Asked whether Ringgold considers his dealings with Russia to be legal, he argued that U.S. companies could work with Rosoboronexport on a "case-by-case" basis. "The particular purpose of the meeting we had -- and I want to be crystal clear -- was in response to a U.S. government requirement," he said.
</p>

<p>
A number of officials at the State Department and in the Pentagon, when contacted for this article, could not say whether working with Rosoboronexport is legal or not. A Pentagon spokeswoman said she was familiar with the issue, but deferred the question to the State Department. When asked about Rosoboronexport's status on the blacklist, John Herzberg, a State Department spokesman replied: "What's on there is on there."
</p>

<p>
Asked whether, given the ban, there was any way a company could legally work with Rosoboronexport, as Ringgold suggested, Herzberg provided an equivocal answer. "At the stage of the process we're at, I'm unable to give you an answer," he said. "You can try elsewhere in government, and maybe they'll be braver than me."
</p>

<p>
In an interview from Iraq, General Luckey conceded it was a murky area, but said, "My understanding is they are currently on our no-go list." 
</p>

<p>
The confusion over debarred parties has even led the U.S. government into its own legal tangles, according to Jim McAleese, a Washington attorney who specializes in government contracting and foreign military sales. Because the Russian government violated U.S. nonproliferation laws, even NASA had to go to Congress to ensure it could work with Russia on Soyuz flights to the international space station. "What I'm warning you about is, don't be surprised by the confusion," McAleese said. "There are a whole bunch of different statutes that were adopted piecemeal and were never intended to be reconciled."
</p>

<p>
But it's the very ambiguity of the law that troubles those who monitor export control. "It's highly unusual to do anything with the Russians, particularly Rosoboronexport," said Scott Jones, director of Export Control Programs at the <a href="http://www.uga.edu/cits/">Center for International Trade and Security</a> at the University of Georgia. 
</p>

<p>
Legal or not, reputable American companies simply don't want to work with banned entities, Jones said, for fear of risking their reputations and business. "Even if it's not an outright prohibition, most companies don't want to put themselves in a liability situation that has really bad PR … and they stay away from it," Jones said. "But if that's your business, pimping out arms from the U.S. or Russia, that's the way it works, and you push as much as possible."
</p>

<p>
Finding any U.S. defense company working with the Russian government at this point would be "remarkable," Jones added.
</p>

<p>
In the meantime, the future for Weldon is unclear. The FBI investigation continues and Weldon's former chief of staff recently pleaded guilty to a conspiracy charge and is cooperating with the government, notes Melanie Sloan, the executive director of <a href="http://www.citizensforethics.org/">Citizens for Responsibility and Ethics in Washington</a>, which filed a complaint against Weldon in 2004. Sloan speculated that Weldon may be charged with "honest service fraud" for misusing his office for personal gain. "It's an easier standard than bribery," she said. "I wouldn't be surprised [if he's charged] with bribery, but I think it will be honest services fraud."
</p>

<p>
Ringgold insists that he and Weldon are on the right side of the law. "Everything we do is in strict compliance with international and U.S. law and we operate only in the best interests of the U.S. government," he said. "I didn't serve 30 years in the United States Army to throw that away on a whim."
</p>

<p>
Asked if Weldon is still working for the company, Ringgold replied: "Absolutely, proudly so." 
</p><br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=3c1b81ed8ecb441b359b5fd6e6dec750" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=3c1b81ed8ecb441b359b5fd6e6dec750" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=f5EjSJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=f5EjSJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=zYmkhj"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=zYmkhj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=S9Ojfj"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=S9Ojfj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=xPEQRJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=xPEQRJ" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=OTsesJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=OTsesJ" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=wFj1Jj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=wFj1Jj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=OExjrj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=OExjrj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=DKk6TJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=DKk6TJ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/326164069" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/326164070" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 18:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/arms brokers">arms brokers</category>
      <category domain="http://securityratty.com/tag/brokers">brokers</category>
      <category domain="http://securityratty.com/tag/infamous arms brokers">infamous arms brokers</category>
      <category domain="http://securityratty.com/tag/defense">defense</category>
      <category domain="http://securityratty.com/tag/firm defense solutions">firm defense solutions</category>
      <category domain="http://securityratty.com/tag/arms">arms</category>
      <category domain="http://securityratty.com/tag/arms trade">arms trade</category>
      <category domain="http://securityratty.com/tag/international arms trade">international arms trade</category>
      <category domain="http://securityratty.com/tag/russian weapons suppliers">russian weapons suppliers</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/326164070/defense_solutions">U.S. Arms Dealer Tests Legal Bounds in Middle East Arms Bazaar</source>
    </item>
    <item>
      <title><![CDATA[Insurer offers mobile health records]]></title>
      <link>http://securityratty.com/article/3f2bef0e6160fc63d8223ad30047913d</link>
      <guid>http://securityratty.com/article/3f2bef0e6160fc63d8223ad30047913d</guid>
      <description><![CDATA[The mobile phone as mobile computer now has the added dimension of being a secure storage device for personal health records, with a rollout of an application by Blue Cross in...]]></description>
      <content:encoded><![CDATA[The mobile phone as mobile computer now has the added dimension of being a secure storage device for personal health records, with a rollout of an application by Blue Cross in Pennsylvania.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=4KKsOL"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=4KKsOL" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/320003768" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 25 Jun 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/personal health records">personal health records</category>
      <category domain="http://securityratty.com/tag/secure storage device">secure storage device</category>
      <category domain="http://securityratty.com/tag/mobile computer">mobile computer</category>
      <category domain="http://securityratty.com/tag/blue cross">blue cross</category>
      <category domain="http://securityratty.com/tag/mobile phone">mobile phone</category>
      <category domain="http://securityratty.com/tag/rollout">rollout</category>
      <category domain="http://securityratty.com/tag/pennsylvania">pennsylvania</category>
      <category domain="http://securityratty.com/tag/application">application</category>
      <category domain="http://securityratty.com/tag/dimension">dimension</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/320003768/article.do">Insurer offers mobile health records</source>
    </item>
    <item>
      <title><![CDATA[The Last HOPE List of Talks posted]]></title>
      <link>http://securityratty.com/article/a586fe982561096a17ae94cd6d3138f4</link>
      <guid>http://securityratty.com/article/a586fe982561096a17ae94cd6d3138f4</guid>
      <description><![CDATA[The 1337 bastards at 2600 have posted the list of talks for The Last HOPE conference being held July 18-20 at the Hotel Pennsylvania in NYC
List of Scheduled Talks Posted
Posted 18 Jun 2008 22:42:50...]]></description>
      <content:encoded><![CDATA[<p>The 1337 bastards at 2600 have posted the list of talks for The Last HOPE conference being held July 18-20 at the Hotel Pennsylvania in NYC.</p>
<blockquote><p>List of Scheduled Talks Posted</p>
<p>Posted 18 Jun 2008 22:42:50 UTC</p>
<p>With a record number of 97 scheduled talks to be presented in three different areas, The Last HOPE has posted a <a href="http://www.thelasthope.org/talks.php">list of talks</a> with time and room assignments forthcoming.<br />
We do plan on having an additional track for unscheduled talks so if you missed this deadline, you still have a shot in the somewhat smaller unscheduled track room. Look for the unscheduled track sign up sheet at the conference.
</p></blockquote>
<p>Of course you&#8217;ll be able to find Dave and I there. Wouldn&#8217;t miss it for the world.</p>
<p>Oh - and you might want to scroll that <a href="http://www.thelasthope.org/talks.php">list of talks</a> down&#8230; maybe just to the Featured Speakers section&#8230; or maybe just below that.</p>
<p>See you in NYC.</p>
<p> Tags: <a href="http://technorati.com/tag/2600" rel="tag">2600</a>, <a href="http://technorati.com/tag/HOPE" rel="tag"> HOPE</a>, <a href="http://technorati.com/tag/the+Last+HOPE" rel="tag"> the Last HOPE</a>, <a href="http://technorati.com/tag/hackers" rel="tag"> hackers</a>, <a href="http://technorati.com/tag/conferences" rel="tag"> conferences</a>, <a href="http://technorati.com/tag/NYC" rel="tag"> NYC</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=tTlbER"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=tTlbER" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=cycoHI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=cycoHI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=8jMe3i"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=8jMe3i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=r9yJdi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=r9yJdi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=JEyU8i"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=JEyU8i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=Kzjyui"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=Kzjyui" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/315522947" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 19 Jun 2008 12:10:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/hope">hope</category>
      <category domain="http://securityratty.com/tag/list">list</category>
      <category domain="http://securityratty.com/tag/conference">conference</category>
      <category domain="http://securityratty.com/tag/hope conference">hope conference</category>
      <category domain="http://securityratty.com/tag/track">track</category>
      <category domain="http://securityratty.com/tag/additional track">additional track</category>
      <category domain="http://securityratty.com/tag/track sign">track sign</category>
      <category domain="http://securityratty.com/tag/nyc">nyc</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/315522947/">The Last HOPE List of Talks posted</source>
    </item>
    <item>
      <title><![CDATA[Altman Weil online store compromised]]></title>
      <link>http://securityratty.com/article/ea938b50d0e97fc94b9bb9b82e2b551b</link>
      <guid>http://securityratty.com/article/ea938b50d0e97fc94b9bb9b82e2b551b</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
5/27/08

Organization
Altman Weil, Inc

Contractor/Consultant/Branch
Unnamed web hosting vendor

Victims
Customers

Number Affected
Unknown

21 Maryland...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/altman.jpg" align="right" height="55" width="200"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>5/27/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.altmanweil.com/">Altman Weil, Inc.</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>Unnamed web hosting vendor<br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown*<br><br><font size="1">*21 Maryland residents were affected</font><br><br><span style="font-weight: bold;">Types of Data:</span><br>"credit card information"<br><br><span style="font-weight: bold;">Breach Description:</span><br>On May 16, 2008, Altman Weil was notified by the company that hosts their on-line web store that credit card information belonging to Altman Weil customers was compromised through a "SQL virus" attack.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.oag.state.md.us/idtheft/Breach%20Notices/ITU-153059.pdf">Maryland State Attorney General breach notification</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>The Maryland State Attorney General<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>On May 16, 2008, we were advised by the company that hosts our On-line Store website that an external virus (known as the SQL virus) access their server and may have attacked the credit card information of certain Altman Weil customers.<br><span style="font-style: italic;">[Evan] What is "the SQL virus"? Is this referring to an attack like that in this story "</span><a style="font-style: italic;" href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&amp;articleId=9080580">Huge Web hack attack infects 500,000 pages</a><span style="font-style: italic;">", an attack like the </span><a style="font-style: italic;" href="http://www.microsoft.com/technet/security/alerts/slammer.mspx">Slammer</a><span style="font-style: italic;"> worm (some would argue that this is the true "SQL virus") or just poor coding that led to a simple SQL injection attack?</span><br><br>Upon learning of this unauthorized breach and attack, on that same day, Altman Weil immediately authorized the hosting company to shut the site down so that access is no longer possible.<br><br>We were told by the hosting company that the server on which the On-line Store resider was password protected and had current firewalls and security protection, by we understand that the SQL virus may nonetheless have accessed credit card information<br><span style="font-style: italic;">[Evan] I doubt that the password protection or "current firewalls and security protection" would have had much effect against poor coding or missing patches.&nbsp; The term "current firewalls and security protection" is pretty subjective, so I can only speculate.</span><br><br>We are actively investigating this attack and are also addressing this incident to fully determine the extent to which credit card information of our customers may have been accessed.<br><br>We are looking for any help that your office or other state and/or federal agencies might be able to provide in assisting us to identify and pursue those responsible for this attack.<br><span style="font-style: italic;">[Evan] This is an interesting request.&nbsp; I think this is the first time that I have read where a company asks for assistance from the Attorney General.</span><br><br>Here are the steps we have taken to date, we:<br><br></font><ol><li><font size="2">On May 16, 2008, notified the Merchant Bank, Bryn Mawr Trust of the potential security breach</font></li><li>On May 16, 2008, learned that Bryn Mawr Trust outsources the actual credit card functions of the Merchant Bank to TransFirst.</li><li>On May 16, 2008, contacted TransFirst and notified it of the potential security breach and was informed that it would notify the three credit card companies, Visa, MasterCard and American Express.</li><li>On May 16, 2008, Altman Weil independently notified Visa, MasterCard, and American Express of the potential security breach.</li><li>On Saturday, May 24, 2008, notified all card holders whose cards were current (i.e. the expiration dates had not kicked in yet) by telephone calls placed.</li><li>Notified all card holders by letter of the situation and the possible risk</li><li>Notified the following law enforcement agencies:</li></ol><ol type="a"><li>Local police department located in Newton Square, Pennsylvania, where Altman Weil is located on May 23, 2008.</li><li>Secret Service's ECTF and Electronic Crimes Working Group on May 24, 2008.</li><li>Every state Attorney General in the states where potentially affected cardholders reside on May 27, 2008.</li><li>Federal Trade Commission on May 27, 2008.</li><li>Office of Thrift Supervision on May 27, 2008.</li><li>Office of the Comptroller of the Currency on May 27, 2008.</li><li>Federal Deposit Insurance Corporation on May 27, 2008.</li><li>Board of Governors of the Federal Reserve System on May 27, 2008</li></ol><ol start="8"><li>Assured that the hosting company has preserved logs and electronic evidence, has logged all actions taken, and has not altered or compromised the systems.</li><li>Retained forensic auditors at are [sic] own expense to undertake a thorough technical investigation of the cause and extent of the breach.</li><li>Committed to be back in touch with those customers who might be at risk with further information, once we have it.<br></li></ol><font size="2"><span style="font-style: italic;">[Evan] Whether I agree with the steps taken or not, I do appreciate the candid response.&nbsp; Without being close to the incident, it seems like Altman Weil did a good job.&nbsp; I presume from the structure that Altman Weil either has incident response procedures or they received good advice.</span><br style="font-style: italic;"><br>For more information contact Joann Miller, at Altman Weil, Inc. at 610-886-2006, or via email at: jamiller@altmanweil.com<br><br><b>Commentary:</b><br>This is an interesting breach although we are not really clear of the details due to the terminology used in the notification. <br><br><b>Past Breaches:</b><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/16/altman.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Mon, 16 Jun 2008 11:27:28 +0000</pubDate>
      <category domain="http://securityratty.com/tag/altman weil">altman weil</category>
      <category domain="http://securityratty.com/tag/breach description">breach description</category>
      <category domain="http://securityratty.com/tag/breach">breach</category>
      <category domain="http://securityratty.com/tag/security breach">security breach</category>
      <category domain="http://securityratty.com/tag/altman weil immediately">altman weil immediately</category>
      <category domain="http://securityratty.com/tag/altman weil customers">altman weil customers</category>
      <category domain="http://securityratty.com/tag/credit card information">credit card information</category>
      <category domain="http://securityratty.com/tag/potential security breach">potential security breach</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <source url="http://breachblog.com/2008/06/16/altman.aspx">Altman Weil online store compromised</source>
    </item>
    <item>
      <title><![CDATA[Metro Round-Up: Phila., Minneapolis, St. Louis Park (Minn.), Texas, Foster City (Calif.), Naperville (Ill.), Chehalis and Centralia (Wash.), Cambria C]]></title>
      <link>http://securityratty.com/article/ba9fa39ee95e3dd8fdd6d81a86d5370d</link>
      <guid>http://securityratty.com/article/ba9fa39ee95e3dd8fdd6d81a86d5370d</guid>
      <description><![CDATA[Philadelphia may find operator for Wi-Fi network: The AP reports that the City of Brotherly Love's Wi-Fi network isn't yet down, or down for the count. While it's scheduled to be flipped off tomorrow...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.forbes.com/feeds/ap/2008/06/11/ap5104811.html"><strong>Philadelphia may find operator for Wi-Fi network:</strong></a> The AP reports that the City of Brotherly Love's Wi-Fi network isn't yet down, or down for the count. While it's scheduled to be flipped off tomorrow (you can read whatever you like into the phrase "flipped off"), the city is talking to a party it won't disclose about the networks future. EarthLink sued Phila. in May to be able to remove its equipment and cap its liabilities. The city's wireless non-profit arm, Wireless Philadelphia, has made noises about what EarthLink's true liability could be; the non-profit has born some of the electrical cost, and might be seeking to have that repaid on top of penalties and other expenses.</p>

<p><a href="http://www.startribune.com/business/19726749.html?location_refer=Homepage"><strong>Minneapolis suffers the heartbreak of leafage:</strong></a> Leaves are popping in Minneapolis, and Star-Tribune columnist Steve Alexander writes that residents are seeing some Wi-Fi reception problems on that city's Wi-Fi network. This is the only big-city network that can be currently described "successful," even though its long-term success has to be proven out. The firm responsible, USI Wireless, told Alexander they're working on adjusting about 5 percent of antennas to cope with the pesky greenery.</p>

<p><a href="http://www.startribune.com/local/west/19745504.html?location_refer=Style%20+%20People"><strong>St. Louis Park sues ARINC over Wi-Fi network:</strong></a> The Minnesota town says the network never worked, and had earlier discussed a lawsuit. The city wants the value of the contract ($1.7m) plus a very modest amount in damages and fees ($50,000). The city plans to start removing gear if ARINC doesn't sometime in June. But they have to deal with 490 poles erected to hold the nodes and solar-charging gear--sunk into concrete. More recent testing showed that the network worked well in some areas, but the majority of the network did not, according to the Star Tribune.</p>

<p><a href="http://telecompetitor.com/node/671"><strong>Verizon builds out fiber in AT&T territory:</strong></a> Interesting sign of competition in otherwise monopoly-per-provider-type world. Verizon is using AT&T's hard-won statewide video franchising rules in Texas to build competitive fiber in Dallas suburbs. They're apparently not bringing telecom; they're acting like a cable TV firm with data. Verizon owns chunks of territory all over due to it encompassing GTE in a deal years ago. GTE serves suburbs west of Portland, Ore., and east of Seattle, for instance, while Qwest serves most of the rest of each state.</p>

<p><a href="http://sanmateodailynews.com/article/2008-6-7-fc-metrofi"><strong>Foster City Wi-Fi dies on June 20:</strong></a> MetroFi is unlighting its cities, and Foster City opted not to spend the nearly $200,000 asking price MetroFi put on its equipment. MetroFi might still find a buyer, but June 20 is the network's current final day. Naperville, Ill., <a href="http://www.suburbanchicagonews.com/napervillesun/news/998667,6_1_NA11_WIFI_S1.article"><strong>also expects a June 20 shutdown</strong></a>. They, too, were offered the network hardware for 200 grand.</p>

<p><a href="http://www.chronline.com/story.php?subaction=showfull&id=1213119382&archive=&start_from=&ucat=1"><strong>Chehalis lights up:</strong></a> A small city in southern Washington votes to put in Wi-Fi hotzones. The cost is about $53,000 and annual fees $15,000. Funds will come from existing tax and grant sources. The city chose to install service to make sure they're not missing a checkbox on the amenities list for visitors and businesses rather than for a particular, measurable goal.</p>

<p><a href="http://www.chronline.com/story.php?subaction=showfull&id=1213205136&archive=&start_from=&ucat=1"><strong>Nearby Centralia pulls its Wi-Fi:</strong></a> A pilot project in the larger city of Centralia, Wash., a bit north of Chehalis, is shut down when poles used to mount Wi-Fi radios are removed as electrical wires are buried. (The reporter here confuses broadband over powerlines (BPL) with broadband wireless.) The system might be restarted later.</p>

<p><a href="http://www.muniwireless.com/2008/06/10/guest-commentary-how-a-pennsylvania-county-paved-the-way-to-muni-broadband-success/"><strong>Craig Settles writes up Pennsylvania's Cambria County wireless success:</strong></a> This is a network built for particular municipal purposes, part of Settles's long-time drumbeat about having applications first and then networks built for those networks second. He notes that Cambria built a 700 sq mi network that sounds nearly cost neutral through efficiency and cost conservation--it's cheaper to get much more service with this network than it was for a smaller array of services with incumbent-provided networks. </p>

<p><a href="http://www.scsun-news.com/news/ci_9545465"><strong>Santa Fe residents oppose Wi-Fi in the library on health grounds:</strong></a> You know what I have to say about how provable this has turned out to be in clinical studies. I am, however, as always, concerned about these people's health, even if I don't believe that Wi-Fi (or EMF) causes their problems. The group opposed to library-Fi is citing the ADA in this case, uniquely I believe. Six libraries suggested that EMF triggers seizures in epileptics, something I've never heard cited before; maybe CRTs (flickering), but EMF? Wired is substantially less kind than I am, pointing out that EMF other than Wi-Fi produces <a href="http://blog.wired.com/gadgets/2008/06/santa-fe-whiner.html"><strong>vastly higher signal strength</strong></a>. (They're sort of ignoring signal strength at a given point where an individual stands in relation to a transmitter, however.)</p>]]></content:encoded>
      <pubDate>Wed, 11 Jun 2008 10:33:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/big-city network">big-city network</category>
      <category domain="http://securityratty.com/tag/residents oppose wi-fi">residents oppose wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/mount wi-fi radios">mount wi-fi radios</category>
      <category domain="http://securityratty.com/tag/wi-fi hotzones">wi-fi hotzones</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/network hardware">network hardware</category>
      <source url="http://wifinetnews.com/archives/008353.html">Metro Round-Up: Phila., Minneapolis, St. Louis Park (Minn.), Texas, Foster City (Calif.), Naperville (Ill.), Chehalis and Centralia (Wash.), Cambria C</source>
    </item>
    <item>
      <title><![CDATA[Teen Hacks PA School Computer, Gets Tax Info]]></title>
      <link>http://securityratty.com/article/de333b4cbac408c0013a50da9aeecb9f</link>
      <guid>http://securityratty.com/article/de333b4cbac408c0013a50da9aeecb9f</guid>
      <description><![CDATA[A 15 year old student managed to hack into a school computer in Pennsylvania. He got his hands on 2005 tax return information for 41,000 which sent a town meeting for a loop
From DailyLocal dot com...]]></description>
      <content:encoded><![CDATA[<p>A 15 year old student managed to hack into a school computer in Pennsylvania. He got his hands on 2005 tax return information for 41,000 which sent a town meeting for a loop.</p>
<p>From DailyLocal dot com:</p>
<blockquote><p> Borough police arrested a 15-year-old Downingtown West High School freshman on May 21 and charged him with theft by unlawful taking or disposition, computer theft, unlawful duplication and computer trespass.</p>
<p>District administrators learned about the intrusion on May 9, when a student told Downingtown West’s principal that another student might have personal information, Griffin said. But 71 school employees did not learn their 2005 W-2 forms were copied until May 16, and Griffin said this was because district officials had to first perform “due diligence.”</p>
<p>According to police, the data files contained more than 41,000 adult taxpayers’ names and personal information, including Social Security numbers, and more than 15,000 students’ names and personal information. The school district sent out letters to 16,595 residences about the incident.</p>
<p>Eldredge said he received the school district’s letter but believes it’s a dead issue.</p>
<p>“For me, I’m comfortable that nothing was done with the information,” Eldredge said.</p></blockquote>
<p>But, not everyone felt the same.</p>
<blockquote><p>“I have a tremendous objection to anyone but the county having this information,” West Bradford resident Susan Singer said. And if there are instances of identity theft, “I will be more than outraged,” she said.</p></blockquote>
<p>ID theft can scare the best of us at the worst of times.</p>
<p><a href="http://www.dailylocal.com/WebApp/appmanager/JRC/Daily;!819070101?_nfpb=true&#038;_pageLabel=pg_article&amp;r21.pgpath=%2FDLN%2FHome&amp;r21.content=%2FDLN%2FHome%2FTopStoryList_Story_2143738">Article Link</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=D7F6J1"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=D7F6J1" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=fOX9QI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=fOX9QI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=hVPTVi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=hVPTVi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=FgaHti"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=FgaHti" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=kfzczi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=kfzczi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=jFmVYi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=jFmVYi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/303609559" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 03 Jun 2008 06:23:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/tax return information">tax return information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/computer theft">computer theft</category>
      <category domain="http://securityratty.com/tag/theft">theft</category>
      <category domain="http://securityratty.com/tag/identity theft">identity theft</category>
      <category domain="http://securityratty.com/tag/school computer">school computer</category>
      <category domain="http://securityratty.com/tag/unlawful duplication">unlawful duplication</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/303609559/">Teen Hacks PA School Computer, Gets Tax Info</source>
    </item>
  </channel>
</rss>
