<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: poker]]></title>
    <link>http://securityratty.com/tag/poker</link>
    <description></description>
    <pubDate>Wed, 25 Jul 2007 17:56:46 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Kentucky Gambling Domains Case Stayed by Court of Appeals]]></title>
      <link>http://securityratty.com/article/74e4e6358b975f75fd08d18bd59f6437</link>
      <guid>http://securityratty.com/article/74e4e6358b975f75fd08d18bd59f6437</guid>
      <description><![CDATA[As reported on Poker News , the Kentucky Court of Appeals has granted a stay of a lower court's order to seize 141 gambling-related domain names . That order was made in a case brought by the state...]]></description>
      <content:encoded><![CDATA[<a href="http://www.pokernews.com/news/2008/11/stay-granted-kentucky-domain-name-seizure.htm">As reported on Poker News</a>, the Kentucky Court of Appeals has granted a stay of <a href="http://blogs.eweek.com/cheap_hack/content/domain_name_market/gambling_domains_seized_by_kentucky.html">a lower court's order to seize 141 gambling-related domain names</a>. That order was made in a case brought by the state under its "gambling devices" statute, a law intended for things like slot machines.

The motion to stay came from the Interactive Media Entertainment & Gaming Association, which is affiliated with the domains playersonly.com, sportsbook.com, sportsinteraction.com, mysportsbook.com and linesmaker.com. Several other outside groups have joined the battle, including the Interactive Gaming Council, the Poker Players Alliance, the Electronic Frontier Foundation, the Center for Democracy and Technology, domain registrar Network Solutions, and the Kentucky office of the American Civil Liberties Union.

<a href="http://www.domainnamenews.com/news/motion-to-stay-granted-in-kentucky-domain-name-seizure/3226">Hat tip to Domain Name News.</a>
<p><a href="http://feedads.googleadservices.com/~a/fnqVb2273A1N6wnp22X2EWU0mmw/a"><img src="http://feedads.googleadservices.com/~a/fnqVb2273A1N6wnp22X2EWU0mmw/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/RSS/cheap_hack/~4/ElXx1Qe-Eaw" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 17 Nov 2008 04:08:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/interactive">interactive</category>
      <category domain="http://securityratty.com/tag/interactive media entertainment">interactive media entertainment</category>
      <category domain="http://securityratty.com/tag/electronic frontier foundation">electronic frontier foundation</category>
      <category domain="http://securityratty.com/tag/domain">domain</category>
      <category domain="http://securityratty.com/tag/poker players alliance">poker players alliance</category>
      <category domain="http://securityratty.com/tag/poker news">poker news</category>
      <category domain="http://securityratty.com/tag/domain names">domain names</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/domains playersonly">domains playersonly</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/ElXx1Qe-Eaw/kentucky_gambling_domains_case_stayed_by_court_of_appeals.html">Kentucky Gambling Domains Case Stayed by Court of Appeals</source>
    </item>
    <item>
      <title><![CDATA[Barracuda to Sourcefire: We see your CEO bet, and raise you to $8.25, call]]></title>
      <link>http://securityratty.com/article/209802e3889a8a43e055f4a827920241</link>
      <guid>http://securityratty.com/article/209802e3889a8a43e055f4a827920241</guid>
      <description><![CDATA[Barracuda continues their poker game with Sourcefire today raising their $7.50 all cash bid to $8.25 . Are Dean and company just bluffing for publicity or are they willing to keep playing and stay in...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Barracuda continues their poker game with Sourcefire today <a href="http://www.ad-hoc-news.de/Aktie/12717849/News/17886955/JUNIPER+NETWORKS.html" target="_blank">raising their $7.50 all cash bid to $8.25</a>.&nbsp; Are Dean and company just bluffing for publicity or are they willing to keep playing and stay in this game until all the cards are on the table?&nbsp; I don't know for sure, but find it interesting that Barracuda did say to Sourcefire that they would be willing to explore ways that would show <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/cards%202.gif"><img style="border-right: 0px; border-top: 0px; margin: 5px 0px 0px 10px; border-left: 0px; border-bottom: 0px" height="226" alt="cards 2" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/cards%202_thumb.gif" width="240" align="right" border="0"></a>Sourcefire's increased value to Barracuda and based upon that increase their offer.&nbsp; Of course $8.25 is still to low, but it is getting closer.&nbsp; If the offer gets near 10 bucks, Sourcefire has some serious decisions to make.&nbsp; In the meantime, Barracuda will again reap the PR bounty from having a seat at the hottest poker game in security.</p></div>
]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 20:27:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/barracuda">barracuda</category>
      <category domain="http://securityratty.com/tag/sourcefire">sourcefire</category>
      <category domain="http://securityratty.com/tag/barracuda continues">barracuda continues</category>
      <category domain="http://securityratty.com/tag/poker game">poker game</category>
      <category domain="http://securityratty.com/tag/game">game</category>
      <category domain="http://securityratty.com/tag/offer">offer</category>
      <category domain="http://securityratty.com/tag/cash bid">cash bid</category>
      <category domain="http://securityratty.com/tag/reap">reap</category>
      <category domain="http://securityratty.com/tag/table">table</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/barracuda-to-so.html">Barracuda to Sourcefire: We see your CEO bet, and raise you to $8.25, call</source>
    </item>
    <item>
      <title><![CDATA[Barracuda to Sourcefire: We see your CEO bet, and raise you to $8.25, call]]></title>
      <link>http://securityratty.com/article/61fc2c9a5296742350d850faf65d61f5</link>
      <guid>http://securityratty.com/article/61fc2c9a5296742350d850faf65d61f5</guid>
      <description><![CDATA[Barracuda continues their poker game with Sourcefire today raising their $7.50 all cash bid to $8.25 . Are Dean and company just bluffing for publicity or are they willing to keep playing and stay in...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Barracuda continues their poker game with Sourcefire today <a href="http://www.ad-hoc-news.de/Aktie/12717849/News/17886955/JUNIPER+NETWORKS.html" target="_blank">raising their $7.50 all cash bid to $8.25</a>.&nbsp; Are Dean and company just bluffing for publicity or are they willing to keep playing and stay in this game until all the cards are on the table?&nbsp; I don't know for sure, but find it interesting that Barracuda did say to Sourcefire that they would be willing to explore ways that would show <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/cards%202.gif"><img style="border-right: 0px; border-top: 0px; margin: 5px 0px 0px 10px; border-left: 0px; border-bottom: 0px" height="226" alt="cards 2" src="http://www.stillsecureafteralltheseyears.com/ashimmy/WindowsLiveWriter/cards%202_thumb.gif" width="240" align="right" border="0"></a>Sourcefire's increased value to Barracuda and based upon that increase their offer.&nbsp; Of course $8.25 is still to low, but it is getting closer.&nbsp; If the offer gets near 10 bucks, Sourcefire has some serious decisions to make.&nbsp; In the meantime, Barracuda will again reap the PR bounty from having a seat at the hottest poker game in security.</p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=WTJOuI"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=WTJOuI" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=zXQ9jI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=zXQ9jI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=F7X7ZI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=F7X7ZI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=xx82tI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=xx82tI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=42liXI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=42liXI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=ATWs4i"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=ATWs4i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=K8sk0i"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=K8sk0i" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/319407818" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 19:27:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/barracuda">barracuda</category>
      <category domain="http://securityratty.com/tag/sourcefire">sourcefire</category>
      <category domain="http://securityratty.com/tag/barracuda continues">barracuda continues</category>
      <category domain="http://securityratty.com/tag/poker game">poker game</category>
      <category domain="http://securityratty.com/tag/game">game</category>
      <category domain="http://securityratty.com/tag/offer">offer</category>
      <category domain="http://securityratty.com/tag/cash bid">cash bid</category>
      <category domain="http://securityratty.com/tag/reap">reap</category>
      <category domain="http://securityratty.com/tag/table">table</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/319407818/barracuda-to-so.html">Barracuda to Sourcefire: We see your CEO bet, and raise you to $8.25, call</source>
    </item>
    <item>
      <title><![CDATA[Underground Multitasking in Action]]></title>
      <link>http://securityratty.com/article/d7eefca5971c1beea7b12dfcdf31c358</link>
      <guid>http://securityratty.com/article/d7eefca5971c1beea7b12dfcdf31c358</guid>
      <description><![CDATA[How many ways in which a malicious party can abuse its unauthorized access to a host, can you think of? In this example of remotely file included web backdoor (web shell) , we have a malicious party...]]></description>
      <content:encoded><![CDATA[<a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp0.blogger.com/_wICHhTiQmrA/SF1jzlKDFtI/AAAAAAAAB0s/E7VTlqUqrbM/s1600-h/underground_multitasking.png"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp0.blogger.com/_wICHhTiQmrA/SF1jzlKDFtI/AAAAAAAAB0s/E7VTlqUqrbM/s200/underground_multitasking.png" alt="" id="BLOGGER_PHOTO_ID_5214433681363637970" border="0" /></a>How many ways in which a malicious party can abuse its unauthorized access to a host, can you think of? In this example of <a href="http://ddanchev.blogspot.com/2007/04/compilation-of-web-backdoors.html">remotely file included web backdoor (web shell)</a>, we have a malicious party that's hosting a web spammer, planning to launch a phishing attack impersonating Halifax, locally hosting blackhat SEO junk pages redirecting to rogue security software, redirecting to multiple live exploit URLs through javascript obfuscations, as well as to fake casinos and fake celebrity video sites - all from a single location.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp0.blogger.com/_wICHhTiQmrA/SF-VmM2nMKI/AAAAAAAAB08/tqCHh34BklY/s1600-h/trru.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp0.blogger.com/_wICHhTiQmrA/SF-VmM2nMKI/AAAAAAAAB08/tqCHh34BklY/s200/trru.jpg" alt="" id="BLOGGER_PHOTO_ID_5215051377036177570" border="0" /></a>This risk-forwarding process for all the malicious and criminal activities to the owner of the compromised web server is something usual, what's more interesting in this case is the number and diversity of the affiliations this guy has set up in order to monetize the unauthorized access by using all the possible sources of revenues like the ones I pointed on in a previous post regarding <a href="http://ddanchev.blogspot.com/2008/06/monetizing-web-site-defacements.html">increasing monetization of web site defacements</a>.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp0.blogger.com/_wICHhTiQmrA/SF-Wf9Qc2ZI/AAAAAAAAB1E/MzTQWzhYmlM/s1600-h/webshell_local_blackhat_pages.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp0.blogger.com/_wICHhTiQmrA/SF-Wf9Qc2ZI/AAAAAAAAB1E/MzTQWzhYmlM/s200/webshell_local_blackhat_pages.JPG" alt="" id="BLOGGER_PHOTO_ID_5215052369281997202" border="0" /></a>In fact, he seems to have built enough confidence in the new "hosting provider", that he's even hosting his blackhat SEO advetising services there. The multiple javascript obfuscations hosted locally, point to the following malicious domains which expose all the revenue generating affiliations, and even more malicious doorways :<br /><br /><span style="font-weight: bold;">analytics-google .info</span><span style="font-weight: bold;">/q/urchin.js</span> <span style="font-weight: bold;"><br />209.205.196.16/freehost22/paula2/index.php?id=0271</span> <span style="font-weight: bold;"><br />209.205.196.16/freehost22/paula2/exxe.php?id=0271</span> <span style="font-weight: bold;"><br />crklab .us/index.php</span> <span style="font-weight: bold;"><br />my-page-de .info/in.cgi?2&amp;1400397</span> <span style="font-weight: bold;"><br />tapki .cn/1.html?92465</span> <span style="font-weight: bold;"><br />dificalgot .net/s/in.cgi?2?1121268b0d022308</span><span style="font-weight: bold;"><br />my-page-de .info?default.cgi</span> <span style="font-weight: bold;"><br />magichotgaming .net</span><br /><span style="font-weight: bold;">allextra .com/best/go.php?sid=2&amp;tds-parametr1=Taryn+Manning</span> <span style="font-weight: bold;"><br />newextra .com/in.cgi?19&amp;group=allextra</span> <span style="font-weight: bold;"><br />drivemedirect .com/soft.php?aid=0358&amp;d=3&amp;product=XPA</span> <span style="font-weight: bold;">securityscannersite .com/2008/3/freescan.php?aid=880358</span><br /><br />Sampe detection rate for the <a href="http://ddanchev.blogspot.com/2007/11/malware-serving-online-casinos.html">casino adware</a>, a reminder on why you shouldn't <a href="http://ddanchev.blogspot.com/2007/09/dont-play-poker-on-infected-table.html">play poker on an infected table</a> :<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp2.blogger.com/_wICHhTiQmrA/SF-U6RowtHI/AAAAAAAAB00/vHw6HTi6XUo/s1600-h/gold_vip_casino_adware.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp2.blogger.com/_wICHhTiQmrA/SF-U6RowtHI/AAAAAAAAB00/vHw6HTi6XUo/s200/gold_vip_casino_adware.JPG" alt="" id="BLOGGER_PHOTO_ID_5215050622406014066" border="0" /></a>Scanners result : 7/33 (21.22%)<br />Trojan.Casino.466752; W32/Casino.A.gen!Eldorado; Adware.Casino-18<br />File size: 466752 bytes<br />MD5...: b0f70441dde5c2b82ba5388f3d566576<br />SHA1..: 5603b1b972e2cff99d6339fbd8970278f5ff371d<br /><br /><br />To sum up - with the overall availability of <a href="http://ddanchev.blogspot.com/2008/03/phishing-pages-for-every-bank-are.html">templates for phishing sites</a>, fake video sites, <a href="http://ddanchev.blogspot.com/2007/12/diverse-portfolio-of-fake-security.html">fake security software</a>, as well as the ongoing traffic management tool's convergence with web malware exploitation kits, the opportunity for a malicious party to participate in different <a href="http://ddanchev.blogspot.com/2007/10/incentives-model-for-pharmaceutical.html">affiliate based scams on revenue sharing basis</a>, increases. Therefore, what looked like an isolated attack, is slowly becoming an "attack in between" the rest of the malicious activities lunched by the same party.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=KXKt5I"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=KXKt5I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=f8500I"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=f8500I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=NFnQOi"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=NFnQOi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=xXyrgi"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=xXyrgi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=TN7skI"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=TN7skI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=P5KP1I"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=P5KP1I" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=H4J7gi"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=H4J7gi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/318122235" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 05:20:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/malicious">malicious</category>
      <category domain="http://securityratty.com/tag/malicious domains">malicious domains</category>
      <category domain="http://securityratty.com/tag/party">party</category>
      <category domain="http://securityratty.com/tag/malicious party">malicious party</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/multiple javascript obfuscations">multiple javascript obfuscations</category>
      <category domain="http://securityratty.com/tag/javascript obfuscations">javascript obfuscations</category>
      <category domain="http://securityratty.com/tag/malicious activities">malicious activities</category>
      <category domain="http://securityratty.com/tag/casino adware">casino adware</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/318122235/underground-multitasking-in-action.html">Underground Multitasking in Action</source>
    </item>
    <item>
      <title><![CDATA[Online poker cheating demonstrates insider risk]]></title>
      <link>http://securityratty.com/article/d03778783719773252cd4970647e249a</link>
      <guid>http://securityratty.com/article/d03778783719773252cd4970647e249a</guid>
      <description><![CDATA[When determining the risk to a system and the data stored on it, insider threats are generally regarded as lower risk. Despite the complete access (high risk) that insiders generally have, most of the...]]></description>
      <content:encoded><![CDATA[When determining the risk to a system and the data stored on it, insider threats are generally regarded as lower risk. Despite the complete access (high risk) that insiders generally have, most of the time insiders are trusted agents (very low risk) on the network. When it breaks down, it can break down in a catastrophic manner, especially if there is money at stake.]]></content:encoded>
      <pubDate>Tue, 17 Jun 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/lower risk">lower risk</category>
      <category domain="http://securityratty.com/tag/low risk">low risk</category>
      <category domain="http://securityratty.com/tag/insiders">insiders</category>
      <category domain="http://securityratty.com/tag/time insiders">time insiders</category>
      <category domain="http://securityratty.com/tag/insider threats">insider threats</category>
      <category domain="http://securityratty.com/tag/complete access">complete access</category>
      <category domain="http://securityratty.com/tag/catastrophic manner">catastrophic manner</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <source url="http://www.networkworld.com/news/2008/061808-online-poker-cheating-demonstrates-insider.html?fsrc=rss-security">Online poker cheating demonstrates insider risk</source>
    </item>
    <item>
      <title><![CDATA[UltimateBet cheating goes undetected for almost 21 months]]></title>
      <link>http://securityratty.com/article/ab86750c9ca2ca89b4459be51f0a8dee</link>
      <guid>http://securityratty.com/article/ab86750c9ca2ca89b4459be51f0a8dee</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
5/29/08

Organization
Tokwiro Enterprises ENRG

Tokwiro Enterprises Enrg&quot; is a recognized Mohawk owned and controlled, gaming sole proprietorship,...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/ultimatebet.jpg" align="right" height="102" width="120"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>5/29/08 <br><br><span style="font-weight: bold;">Organization: </span><br>Tokwiro Enterprises ENRG*<br><br><font size="1">*"Tokwiro Enterprises Enrg" is a recognized Mohawk owned and controlled, gaming sole proprietorship, presently undergoing a licencing process with the "Kahnawake Gaming Commission" ("KGC"), which was itself established on the 10th day of June, 1996. (Source: <a href="http://www.ultimatebet.com/about-us)</font><br><br><span">www.ultimatebet.com/about-us)</font><br><br><span</a> style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.ultimatebet.com/">UltimateBet</a> <br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>"hole card information during live play" resulting is financial loss<br><br><span style="font-weight: bold;">Breach Description:</span><br>"MONTREAL, CANADA (MAY 29, 2008) --- Tokwiro Enterprises ENRG ("Tokwiro"), proprietors of UltimateBet.com ("UltimateBet"), one of the world's largest online card rooms, today announced the results of its lengthy investigation into allegations of unfair play, which was triggered by concerns about an account named 'NioNio'."<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.ultimatebet.com/poker-news/2008/may/NioNio-Findings">UltimateBet Statement</a> (full statement text below)<br><a href="http://www.cjad.com/news/565/729153">CJAD NewsTalk Radio</a> <br><a href="http://www.cardplayer.com/poker-news/article/4279/owner-of-ultimatebet-confirms-security-breach">Card Player</a> <br><a href="http://www.pokerlistings.com/ultimatebet-wraps-investigation-of-unfair-play-27499">PokerListings</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Tokwiro Enterprises ENRG and Bob Pajich at Card Player<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>Tokwiro Enterprises, the company that owns both Absolute Poker and UltimateBet, today released a statement confirming that cheating had gone on at UltimateBet by people who, according to the release, "worked for the previous ownership of UltimateBet prior to the sale of the business to Tokwiro in October 2006."<br><span style="font-style: italic;">[Evan] Shouldn't an information security and risk assessment be conducted as part of the acquisition and integration?&nbsp; If so, then wouldn't a code review of the proprietary software that came with the acquisition be included?&nbsp; This is the proprietary software that really drives the purpose of the site.</span><br><br>The player or players behind the 18 screen names that were identified as being corrupted have not been named.<br><br>Tokwiro will refund players their losses once the investigation is complete.<br><span style="font-style: italic;">[Evan] I wonder how expensive this will be.</span><br><br>The usernames that were used to cheat are: NioNio, Sleepless, NoPaddles, nvtease, flatbroke33, ilike2win, UtakeIt2, FlipFlop2, erick456, WhackMe44, RockStarLA, stoned2nite, monizzle, FireNTexas, HeadKase01, LetsPatttty, NYMobser, and WhoWhereWhen.<br><br>The cheating was able to take place because the perpetrators had access to what Tokwiro is calling an "unauthorized software code" that allowed the cheaters to see their opponents’ holecards.<br><span style="font-style: italic;">[Evan] This "unauthorized software code" use went undetected for almost 21 months!</span><br><br>The cheating took place from March 7, 2006 to Dec. 3, 2007, and it’s not known how much money the cheater(s) illicitly won.<br><br>The company refused to disclose the amount of fraudulent winnings, but poker observers have said it runs into the millions.<br><br>As soon as the cheating was suspected, Tokwiro said it contacted the Kahnawake Gaming Commission (KGC), the most used online poker regulatory commission, to start the investigation.<br><br>Tokwiro is mandated to contact KGC if any suspicious activety might be taking place.<br><br>This is the second cheating incident to hit the company since it purchased Absolute Poker and UltimateBet.<br><br>The first occurred when it was discovered that several players at Absolute Poker also had access to software that allowed them to see opponents’ holecards.<br><span style="font-style: italic;">[Evan] A link is included below</span><br><br><center>ULTIMATEBET ISSUES STATEMENT REGARDING UNFAIR PLAY</center><br><br><span style="font-weight: bold;">MONTREAL, CANADA (MAY 29, 2008)</span> --- Tokwiro Enterprises ENRG ("Tokwiro"), proprietors of UltimateBet.com ("UltimateBet"), one of the world's largest online card rooms, today announced the results of its lengthy investigation into allegations of unfair play, which was triggered by concerns about an account named 'NioNio'. Tokwiro has worked diligently in cooperation with its regulatory body, the Kahnawake Gaming Commission ("KGC"), and with independent third-party experts to conduct a thorough investigation that included a comprehensive review of hand histories and game data, thorough analyses of software and network security, and audits of its security practices and procedures.<br>&nbsp;<br>The investigation has concluded that certain player accounts did in fact have an unfair advantage, and that these accounts targeted the highest limit games on the site. The individuals responsible were found to have worked for the previous ownership of UltimateBet prior to the sale of the business to Tokwiro in October 2006. Tokwiro is taking full responsibility for this situation and will immediately begin refunding UltimateBet customers for any losses that were incurred as a result of unfair play. <br><br>The fraudulent activity was enabled by unauthorized software code that allowed the perpetrators to obtain hole card information during live play. The existence of this vulnerability was unknown to Tokwiro until February 2008 and existed prior to UltimateBet's acquisition by Tokwiro in October 2006. Our investigation has confirmed that the code was part of a legacy auditing system that was manipulated by the perpetrators. Gaming Associates, independent auditors hired by the KGC, have confirmed that the software code that provided the unfair advantage has been permanently removed.<br>&nbsp;<br>Throughout the investigation of this incident, Tokwiro's consistent priorities have been: <br></font><ol><li><font size="2">To permanently remove the ability to engage in unfair play;</font></li><li>To complete its investigation and come to a full understanding of what occurred;</li><li>To refund the affected customers; and</li><li>To implement measures that prevents future incidents. <br></li></ol><font size="2">The Company said, "We would like to thank our customers for their patience, loyalty and support, as well as for their understanding that we are doing everything we can to correct this situation. The staff and management of UltimateBet are fully committed to providing a safe and secure environment for our players, and we want to assure customers of our unwavering resolve to monitor site security with every resource at our disposal." <br><br><span style="font-weight: bold;">Investigation Timeline </span><br>These are the key events in the course of the incident. <br></font><ul><li><font size="2">January 2008: UltimateBet is alerted to suspicions of unfair play on the part of the account "NioNio". Within 24 hours, UltimateBet contacts the KGC to provide formal notice that UltimateBet has initiated an investigation of the incident. UltimateBet subsequently forwarded a copy of all related data to the KGC.</font></li><li>January 2008: The "NioNio" account and related accounts are suspended pending further investigation.</li><li>February 2008: Preliminary findings indicate abnormally high winning statistics for the suspect accounts. After discussions with the KGC, UltimateBet engages third-party gaming experts to assist with the analysis.</li><li>February 2008: Investigators confirm that the suspect accounts are associated with individuals who had worked for UltimateBet under the previous ownership.</li><li>February 2008: UltimateBet discovers the unauthorized code that allowed the perpetrators to obtain hole card information during live play. The code was part of a legacy auditing system that was manipulated by the perpetrators of the fraud.</li><li>February 2008: UltimateBet immediately removes the unauthorized code and works with the KGC and with third-party auditors to verify that the security hole has been eliminated.</li><li>March 2008: Six player accounts are confirmed to have participated in this scheme. No accounts were deleted at any point, although some account names were changed multiple times. The following account names are known to have been used in the fraudulent activity: NioNio, Sleepless, NoPaddles, nvtease, flatbroke33, ilike2win, UtakeIt2, FlipFlop2, erick456, WhackMe44, RockStarLA, stoned2nite, monizzle, FireNTexas, HeadKase01, LetsPatttty, NYMobser, and WhoWhereWhen.</li><li>May 2008: The investigation confirms that the fraudulent activity took place from March 7, 2006 to December 3, 2007.</li><li>May 2008: Gaming Associates certifies that the software code that enabled unfair play was removed from UltimateBet servers in February of 2008.</li><li>May 2008: Customers affected by this incident are identified, and plans for corrective action are reviewed with the KGC. <br></li></ul><font size="2"><span style="font-weight: bold;">Corrective Actions Taken </span><br>The following actions have been taken or are currently underway as a direct result of this investigation. <br></font><ul><li><font size="2">The security hole identified in UltimateBet's investigation has been permanently eliminated.</font></li><li>UltimateBet is establishing a state-of-the-art software Security Center that consolidates and greatly enhances existing security capabilities. The first release of the new Security Center focuses solely on the immediate detection of abnormal winnings. Gaming mathematicians, poker professionals, and security software developers have all contributed to the specifications for the new Security Center.</li><li>UltimateBet customers are no longer permitted to change account names unless they have suffered abuse in chat rooms. Requests for changes must be supported by proof of abuse and must be approved by the Chief Compliance Officer.</li><li>In addition to its existing security department, UltimateBet has established a new specialized Poker Security team of professionals dedicated to fraud prevention.</li><li>The refund process will begin immediately. The accounts associated with fraudulent activity did not use an unfair advantage in all play sessions. Regardless, UltimateBet is refunding all losses to these accounts.</li><li>Accounts related to the fraudulent activity have been disabled, and the individuals associated with those accounts permanently banned from the site.</li><li>UltimateBet has worked closely and transparently with its governing body, the KGC and its designated expert auditors, to determine exactly what happened, how it happened, and who was involved, and has taken action to prevent any possibility of this situation recurring.</li><li>Tokwiro is pursuing its legal options in regard to this incident. <br></li></ul><font size="2">For further inquiries please contract press@ultimatebet.com <br><br><span style="font-weight: bold;">Commentary:</span><br>This is potentially a multi-million dollar loss for Tokwiro Enterprises ENRG and its very troubling that this breach went undetected for so long. The software used by the site is proprietary and should really be subject to a significant amount of information security scrutiny.<br><br>If I were a player, I think I would be beyond angry.&nbsp; Not just angry about the loss of money, but angry about the loss of confidence and being cheated in general.&nbsp; I personally know people that refuse to play online poker because of the risk posed by poorly secured sites.<br><br>Information security of online gaming sites must be a #1 priority for the companies that run them.&nbsp; Seems obvious, but many statements in the information security business seem obvious.&nbsp; Personally, I like the response from Tokwiro.&nbsp; If they follow through (which I assume they would), Tokwiro's actions should go a long ways towards reducing risk and restoring customer confidence.<br><br>Check out the comments at <a href="http://www.cardplayer.com/poker-news/article/4279/owner-of-ultimatebet-confirms-security-breach">Card Player</a> to get some insight into what some players are thinking. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Tokwiro Enterprises ENRG/Absolute Poker:<br>October, 2007 - <a href="http://www.msnbc.msn.com/id/21381022/">Online poker cheating blamed on employee</a></font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/04/ultimatebet.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Wed, 04 Jun 2008 06:55:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ultimatebet">ultimatebet</category>
      <category domain="http://securityratty.com/tag/tokwiro enterprises enrg">tokwiro enterprises enrg</category>
      <category domain="http://securityratty.com/tag/tokwiro enterprises">tokwiro enterprises</category>
      <category domain="http://securityratty.com/tag/ultimatebet issues statement">ultimatebet issues statement</category>
      <category domain="http://securityratty.com/tag/ultimatebet prior">ultimatebet prior</category>
      <category domain="http://securityratty.com/tag/ultimatebet subsequently">ultimatebet subsequently</category>
      <category domain="http://securityratty.com/tag/ultimatebet immediately removes">ultimatebet immediately removes</category>
      <category domain="http://securityratty.com/tag/ultimatebet servers">ultimatebet servers</category>
      <category domain="http://securityratty.com/tag/ultimatebet statement">ultimatebet statement</category>
      <source url="http://breachblog.com/2008/06/04/ultimatebet.aspx">UltimateBet cheating goes undetected for almost 21 months</source>
    </item>
    <item>
      <title><![CDATA[From warzones to strip clubs, the truth comes out for a former First Lady and a Pastor.]]></title>
      <link>http://securityratty.com/article/4644a2739d9bbdd4b4a3b5d2c22ca326</link>
      <guid>http://securityratty.com/article/4644a2739d9bbdd4b4a3b5d2c22ca326</guid>
      <description><![CDATA[Last week in the Washington Post, &quot;The Fact Checker&quot; awarded former first lady, Hillary Clinton, four &quot;Pinocchios&quot; (real whoppers)for claiming to have come under sniper fire during a photo op. in...]]></description>
      <content:encoded><![CDATA[Last week in the Washington Post, "The Fact Checker" awarded former first lady, Hillary Clinton, four "Pinocchios" (real whoppers)for claiming to have come under sniper fire during a photo op. in Bosnia.  On Thursday, Michael Dobbs once again awarded Senator Clinton another "poker" of Pinocchios.  <br /><span id="fullpost"><br /><br />This time she took heat for claiming that her trip to Bosnia was the first visit to a "war zone" by a first lady since World War II.  Her claim is considered completly inaccurate, since Pat Nixon made a trip to Saigon in July 1969.  At the time, South Vietnam was an actual, not a "potential" war zone in the aftermath of the 1968 Tet offensive.<br /><br />The article also made mention of Barbara Bush's visit to Saudi Arabia in 1990, two months before the Persian Gulf war began.  Speaking about Senator Clinton's claim that her aircraft made a tactical landing back in 1996, the pilot of the aircraft had a different memory.  Retired Air Force Col. William Changose said that it was not true that they took evasive measures to avoid sniper fire.  The Colonel went on to say that: "not only were there no bullets flying, there wasn't even a bumblebee flying around".          <br /></span><br />It seems that Senator Clinton is not the only one in the public eye to suffer from Pinocchioitis.  Apparently the Police in Riverside, Ohio found a Pastor who had gone missing from his home in western New York, since Wednesday the 26th of March, after telling his wife that he was going to Best Buy to have his computer fixed. Officers found the Pastor at a strip club called the "K.C. Lounge", partying like a New York Govenor.<br /><br />We often hear people in the media complaining about the negative effects that Rap music has on our youth.  One wonders why we are now not hearing more complaining about the so-called role models getting caught with their pants down, so to speak.  At least with the likes of rappers and other "bad boy" entertainers, what you see, is what you get.  It's little wonder that so many people are comfortable telling lies during interviews and embellishing resumes in order to get hired and get ahead.  <br /><br />When I was going to school, the "dog ate my homework" excuse was used but not believed.  Also, it tended to get used by children who had not yet reached their teens.  I think that even children of that age these days will be able to see through these poorly constructed falsehoods that our "role models" would have us believe.<br /><br />Unbelievable.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 30 Mar 2008 16:57:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/senator clinton">senator clinton</category>
      <category domain="http://securityratty.com/tag/sniper fire">sniper fire</category>
      <category domain="http://securityratty.com/tag/avoid sniper fire">avoid sniper fire</category>
      <category domain="http://securityratty.com/tag/role models">role models</category>
      <category domain="http://securityratty.com/tag/war zone">war zone</category>
      <category domain="http://securityratty.com/tag/lady">lady</category>
      <category domain="http://securityratty.com/tag/pastor">pastor</category>
      <category domain="http://securityratty.com/tag/air force col">air force col</category>
      <category domain="http://securityratty.com/tag/persian gulf war">persian gulf war</category>
      <source url="http://www.thebulletproofblog.com/2008/03/from-warzones-to-strip-clubs-truth.html">From warzones to strip clubs, the truth comes out for a former First Lady and a Pastor.</source>
    </item>
    <item>
      <title><![CDATA[Malware Serving Online Casinos]]></title>
      <link>http://securityratty.com/article/eb067092fa6e9360cff0bed7d1f77d81</link>
      <guid>http://securityratty.com/article/eb067092fa6e9360cff0bed7d1f77d81</guid>
      <description><![CDATA[Don't play poker on an infected table part two. The following three online casinos are currently serving embedded malware in the form of IFRAMES and the average javascript obfuscation

The first one...]]></description>
      <content:encoded><![CDATA[<a href="http://bp3.blogger.com/_wICHhTiQmrA/R088w9bft5I/AAAAAAAABJc/W2m0_0_PSK8/s1600-h/infected_casinos.jpg"><img id="BLOGGER_PHOTO_ID_5138392511674300306" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp3.blogger.com/_wICHhTiQmrA/R088w9bft5I/AAAAAAAABJc/W2m0_0_PSK8/s200/infected_casinos.jpg" border="0" /></a><a href="http://ddanchev.blogspot.com/2007/09/dont-play-poker-on-infected-table.html">Don't play poker on an infected table</a> part two. The following three online casinos are currently serving embedded malware in the form of IFRAMES and the average javascript obfuscation.<br /><br />The first one is <strong>poker.gagnantscasino.com</strong> (213.186.33.4) with current obfuscation loading <strong>statistics-gdf.cn/ad/index.php</strong> (116.0.103.133) where another obfuscation loads, deobfuscated attempts to load p423ck.exe (Zlob) at <strong>statistics-gdf.cn/ad/load.php</strong>, playing around with the host for too long results in zero malicious activity, at least they make you think so. Here's another internal URL <strong>statistics-gdf.cn/ad/index.php?com</strong><br /><strong></strong><br /><strong>Detection rate</strong> : Result: 7/32 (21.88%)<br /><strong>File size</strong>: 43008 bytes<br /><strong>MD5</strong>: 08f445712adcef5ef091378c51bbbaaa<br /><strong>SHA1</strong>: 3478fe6a600251b2ee147dbd50eaf4f204a884cb<br /><br />Last week's obfuscation at this online casino was pointing to <strong>traffmaster.biz/ra/in.cgi?5</strong> which is now down.<br /><br />The second casino is <strong>fabispalmscasino.com</strong> (82.165.121.138) with current obfuscation attempting to connect to the now down <strong>stat1count.net/strong</strong>, a host residing on a netblock I covered before showcasing <a href="http://ddanchev.blogspot.com/2007/11/scammy-ecosystem.html">a scammy ecosystem</a>. The third one is <strong>sypercasino.com</strong> which was resolving to 203.117.111.102 early this week, and taking advantage of WebAttacker at <strong>sypercasino.com/biling/index.php</strong>. Now it resolves to 58.65.236.10 and promotes <strong>banner.casino.com/cgi-bin/SetupCasino.exe</strong><br /><strong></strong><br /><strong>Detection rate</strong>: 9/32 (28.13%)<br /><strong>File size</strong>: 194077 bytes<br /><strong>MD5</strong>: 26da6f81349ff388d08280ababab9150<br /><strong>SHA1</strong>: f20e8fee439264915710f9478ec1e74583563851<br /><br />It's interesting to monitor how people behind these manually change the obfuscations to further expand their connections with other scammers, or services and attack approaches they use, and even more interesting to see it happen <a href="http://ddanchev.blogspot.com/2007/10/love-is-psychedelic-too.html">on-the-fly</a> just like <a href="http://ddanchev.blogspot.com/2007/11/managed-fast-flux-provider.html">meds247.org</a> for instance.<br /><br />Don't play poker on an infected table.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=YEvz9DB"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=YEvz9DB" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=cxiz30B"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=cxiz30B" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=4HvXwvc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=4HvXwvc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=IPAUz7c"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=IPAUz7c" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=tPrRwcC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=tPrRwcC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=8BCOp1C"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=8BCOp1C" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=trXGCKc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=trXGCKc" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/192633946" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 29 Nov 2007 13:37:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/obfuscation">obfuscation</category>
      <category domain="http://securityratty.com/tag/current obfuscation">current obfuscation</category>
      <category domain="http://securityratty.com/tag/obfuscation loads">obfuscation loads</category>
      <category domain="http://securityratty.com/tag/play poker">play poker</category>
      <category domain="http://securityratty.com/tag/poker">poker</category>
      <category domain="http://securityratty.com/tag/internal url statistics-gdf">internal url statistics-gdf</category>
      <category domain="http://securityratty.com/tag/statistics-gdf">statistics-gdf</category>
      <category domain="http://securityratty.com/tag/average javascript obfuscation">average javascript obfuscation</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/192633946/malware-serving-online-casinos.html">Malware Serving Online Casinos</source>
    </item>
    <item>
      <title><![CDATA[Zune Killer App - Windows Media Center]]></title>
      <link>http://securityratty.com/article/c1d04a11f31c9276f4fc0d15345f48fd</link>
      <guid>http://securityratty.com/article/c1d04a11f31c9276f4fc0d15345f48fd</guid>
      <description><![CDATA[I admit it, I did not buy a Zune last year when they were first released. I don't have a large music collection and I'm generally happy listening to the radio to get my music fix, or the digital music...]]></description>
      <content:encoded><![CDATA[<p>I admit it, I did not buy a Zune last year when they were first released.&nbsp; I don't have a large music collection and I'm generally happy listening to the radio to get my music fix, or the digital music channels available from my cable company, if you will.</p> <p>However, as some of you may realize from my previous postings (Vista Media Center <a href="http://blogs.technet.com/security/archive/2007/05/23/building-my-windows-vista-media-center-part-1-the-system.aspx">Part 1</a>, <a href="http://blogs.technet.com/security/archive/2007/06/05/building-my-windows-vista-media-center-vmc-part-2-the-tuner.aspx">Part 2</a> and <a href="http://blogs.technet.com/security/archive/2007/11/03/building-my-windows-vista-media-center-vmc-part-3-mymovies2.aspx">Part 3</a>), I have been a fan of Media Center as a potential alternative to the recently-downgraded (don't get me started, even my wife lost what she considered *basic* features with the "standard" Comcast DVR downgrade) Comcast DVR.</p> <p>The event that kicks this story of begins with a Poker game.&nbsp; Just after <a href="http://blogs.technet.com/security/archive/2007/10/03/zune-and-ipod-size-comparison.aspx">Microsoft announced the new Zune line-up</a> in October, I <img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; border-right-width: 0px" height="83" alt="zune-reaper" src="http://blogs.technet.com/blogfiles/security/WindowsLiveWriter/ZuneKillerFeatureWindowsMediaCenter_856A/zune-reaper_1.jpg" width="147" align="right" border="0">won a charity poker event where the prize was a custom Zune 30.&nbsp; It was basically a "pearl" Zune with a special logo on the back and pre-loaded with some poker theme music that we heard during the event.&nbsp; I played with it a few days, loading it with some songs and even buying a couple of recent ones from the Zune marketplace.</p> <p>Then ... I discovered the killer feature ... integration with my Windows Vista Media Center.&nbsp;&nbsp; Now, technically, this feature was not actually enabled when I discovered it.&nbsp; However, it took me all of 5 minutes to find the registry mod on the Internet and enable it.&nbsp; That became moot a week or so ago when the recent Zune upgrade rectified that issue, so now everyone can enjoy this feature by default.&nbsp; Here is the very simple set-up instructions:</p> <ol> <li>Install the Zune software on your media center  <li>Make sure you add your "Recorded TV" folder, if it is in an odd place (mine is on an external half-TByte drive).  <li>Plug in your Zune device as a guest  <li>Sync recorded TV shows to your heart's content</li></ol> <p>Now, let's see why this rocks...</p> <h3><font color="#000080" size="3">iPod vs Zune TV Comparison</font></h3> <p><strong>The Apple Way...</strong></p> <p>There was much ado when the Daily Show became available on iTunes for $1 per show or $9.99 for 16 episodes (roughly 3 weeks of shows).&nbsp; I browsed over to <a title="http://www.apple.com/itunes/store/tvshows.html" href="http://www.apple.com/itunes/store/tvshows.html">http://www.apple.com/itunes/store/tvshows.html</a>&nbsp;just now and found this blurb:</p> <blockquote> <p> <p><em><strong>Be a watercooler hero.</strong>&nbsp; For as little as $1.99, you can own the latest episode of your favorite show as early as one day after it airs, or purchase past episodes that you missed (or want to watch over and over). Choose a Season Pass and get a whole season of a TV show, past or present, at a discount. Or buy Multi-Passes for shows that air every day, like The Daily Show with Jon Stewart, and enjoy a month’s worth of episodes downloaded automatically to your computer.</em></p> <p></p></blockquote> <p>Well, yahoo, yipee!&nbsp; Only $2 per show on your iPod, iPhone or Apple TV.</p> <p><strong>The Zune + Media Center Way ...</strong></p> <p>I record all of my favorite TV shows on my Windows Media Center.&nbsp; In the evening, I plug in my Zune and choose which shows to sync for mobile watching.&nbsp; For example, last night I chose the two latest episodes of Heroes which I had not gotten around to watching because of my recent Jury Duty and the holiday activities.&nbsp; The Zune software automagically converts the show to 320x240 and syncs it to my Zune.</p> <p>This morning on the <a href="http://blogs.technet.com/security/archive/2007/11/02/my-supergeek-moment-on-the-way-to-work.aspx">Connector Bus to work</a>, I watched <a href="http://en.wikipedia.org/wiki/Out_of_Time_%28Heroes%29">Heroes Season 2, Episode 7, "Out of Time"</a> and found out the surprising identity of "Adam Monroe."&nbsp; I'll watch Episode 8 on the way home...</p> <h3><font color="#000080" size="3">And My TV Movies Too...</font></h3> <p>And, it doesn't stop there.&nbsp; As I <a href="http://blogs.technet.com/security/archive/2007/11/03/building-my-windows-vista-media-center-vmc-part-3-mymovies2.aspx">described previously</a>, I've been building up quite a library of TV Movies, cutting out commercials, compressing them and creating my own on-demand TV Movies library.&nbsp; Since I got my Zune, I've switched to using MP4 compression with H.264 video&nbsp;and AAC3 audio, which gets added automatically to my Zune library and can be synced to the device... better together indeed!</p> <p>With my Zune 30, this means I can load up about 50 kids movies and TV shows that I've previously recorded for those long road trips and vacations.&nbsp; In fact, I can plug my Zune into the aux-video inputs in our mini-van and play directly on the integrated DVD video screen.</p> <p>And it is all so <em>easy</em>...</p><img src="http://blogs.technet.com/aggbug.aspx?PostID=2566603" width="1" height="1">]]></content:encoded>
      <pubDate>Mon, 26 Nov 2007 18:55:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/zune">zune</category>
      <category domain="http://securityratty.com/tag/apple tv">apple tv</category>
      <category domain="http://securityratty.com/tag/apple">apple</category>
      <category domain="http://securityratty.com/tag/tv">tv</category>
      <category domain="http://securityratty.com/tag/tv movies">tv movies</category>
      <category domain="http://securityratty.com/tag/zune software">zune software</category>
      <category domain="http://securityratty.com/tag/zune tv comparison">zune tv comparison</category>
      <category domain="http://securityratty.com/tag/media center">media center</category>
      <category domain="http://securityratty.com/tag/windows media center">windows media center</category>
      <source url="http://blogs.technet.com/security/archive/2007/11/26/zune-killer-app-windows-media-center.aspx">Zune Killer App - Windows Media Center</source>
    </item>
    <item>
      <title><![CDATA[Forget the IPhone, Give me the JPhone]]></title>
      <link>http://securityratty.com/article/6e604fb8c0b353c5c773310a2c536dd7</link>
      <guid>http://securityratty.com/article/6e604fb8c0b353c5c773310a2c536dd7</guid>
      <description><![CDATA[Phones are a lot like other products in that when you get the one you think you want, your main takeaway is to learn about what you want different on your next purchase
My wife and I are always...]]></description>
      <content:encoded><![CDATA[<p>Phones are a lot like other products in that when you get the one you <em>think</em> you want, your main takeaway is to learn about what you want different on your next purchase.</p> <p>My wife and I are always discussing key things we want in our next home purchase (like more garage space, for example) - though we have no plans to change houses anytime soon.&nbsp; That has been the iPhone for me.&nbsp; I knew immediately I didn't want one and knew that it wasn't going to change.</p> <p>Why?&nbsp; The dealbreaker for me is the lack of an actual phone number pad, where you have to use softkeys to dial your number.&nbsp; I have that now.&nbsp; I hate it and will never get a phone again that doesn't have a physical number pad for dialing (except maybe a really small one that is totally voice controlled - but that seems unlikely in the near-term.)</p> <p>So, in case any phone vendors are out there, or if you are influential with a phone vendor, here are my asks:</p> <ul> <li>Stylish, small, form-factor.&nbsp; Lots of good examples of this.&nbsp; I like the "Chocolate" and the Sony Ericsson W600i, for example.</li> <li>Physical number pad.&nbsp; The Nokia N series and the W600i are both good examples of having a good number pad, without a full keyboard.</li> <li>NO full keyboard.&nbsp; I've got one and don't use it.&nbsp; I don't want to type email messages or IMs on my phone, but if I have to, a soft keyboard or the numberpad is good enough.</li> <li>NO camera.&nbsp; Get rid of it, reduce my price.&nbsp; I have a camera and&nbsp;don't need a crappy one on my phone.</li> <li>Outlook Mobile.&nbsp; I want to emphasize this by itself.&nbsp; The *main* reason I want to any sort of smart phone is to keep my schedule sync'd up and easy to access.</li> <li>Good size screen with touch screen.&nbsp; I do have to say I love the screen size on the iPhone - however, I do want the phone to be compact.&nbsp; So, taking keyboard and screen together,&nbsp;I think the Nokia N73 is a good example of the right balance.</li> <li>Bluetooth.</li></ul> <p>Now, in the cheapy version, that would be it.&nbsp; Wouldn't it be great to have that option?&nbsp; Of course, I do want a few other features which I think are implied.&nbsp; I think if the phone uses Windows Mobile, I probably get these automatically:</p> <ul> <li>I want to be able to play my mobile games (e.g. bejeweled 2, poker) </li> <li>I want to be able to load up and run a VOIP client and connect to my home network to accept or make calls.</li> <li>I would like to be able to access the Internet to check movie times.</li> <li>I would like to play my music</li></ul> <p>So, in summary, I just want a small, stylish phone, with Outlook scheduling and good Internet usability.&nbsp; It'd be nice if I could replace my music player with it, but I have no interest in replacing my camera or having a touch screen only.&nbsp;</p><img src="http://blogs.technet.com/aggbug.aspx?PostID=1610261" width="1" height="1">]]></content:encoded>
      <pubDate>Wed, 25 Jul 2007 17:56:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/actual phone">actual phone</category>
      <category domain="http://securityratty.com/tag/phone">phone</category>
      <category domain="http://securityratty.com/tag/stylish phone">stylish phone</category>
      <category domain="http://securityratty.com/tag/phone vendor">phone vendor</category>
      <category domain="http://securityratty.com/tag/phone vendors">phone vendors</category>
      <category domain="http://securityratty.com/tag/smart phone">smart phone</category>
      <category domain="http://securityratty.com/tag/keyboard">keyboard</category>
      <category domain="http://securityratty.com/tag/soft keyboard">soft keyboard</category>
      <category domain="http://securityratty.com/tag/change">change</category>
      <source url="http://blogs.technet.com/security/archive/2007/07/25/forget-the-iphone-give-me-the-jphone.aspx">Forget the IPhone, Give me the JPhone</source>
    </item>
  </channel>
</rss>
