<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: quarter]]></title>
    <link>http://securityratty.com/tag/quarter</link>
    <description></description>
    <pubDate>Mon, 06 Oct 2008 05:38:19 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[On Inspiration and Security]]></title>
      <link>http://securityratty.com/article/af4d15d6025dceda15351079f12284de</link>
      <guid>http://securityratty.com/article/af4d15d6025dceda15351079f12284de</guid>
      <description><![CDATA[First, I have a horrible revelation to make: I never held CEOs in much regard. For example, if you go to a CEO keynote at a security conference (RSA comes to mind ), you can be pretty much assured...]]></description>
      <content:encoded><![CDATA[<p>First, I have a horrible revelation to make: I never held CEOs in much regard. For example, if you go to “a CEO keynote” at a security conference (RSA <a href="http://chuvakin.blogspot.com/2008/04/rsa-2008-summary-and-reflections.html">comes to mind</a>), you can be&#160; pretty much assured that you’d get a boring, bland and “content-free” speech which summarizes to 1 word: nothing. Actually, it is 0 words :-)&#160; Similarly, even though I knew what CEOs did (tell people what to do, give speeches so that employees work better, help sales sell, interfere with engineers’ engineering :-), etc), but always regarded them as people regarded <a href="http://en.wikipedia.org/wiki/Political_commissar">“party commissars” back in the Soviet Union days</a>: as folks who give rosy speeches hardly anybody believes in and who show charts with upward trending curves (e.g. “Bullshit volume per employee per quarter is UP 34.6%!!!” :-)) To better understand this point read the famous book “<a href="http://www.amazon.com/Business-People-Speak-Like-Idiots/dp/0743269098">Why Business People Speak Like Idiots: A Bullfighter's Guide</a>” :-)</p>  <p>So, my dear readers, imagine how amazed I was to find myself being truly inspired by my CEO,&#160; for the first time in my working life! Philippe’s “no-B.S.” approach definitely works for me. I listened to his speech at a company meeting last week and – I am serious! – that was the most interesting, visionary AND inspiring speech that I’ve heard in a long time. It was clear what we’ve been doing, what worked, what didn’t and what we need to be doing and why it will work.</p>  <p>I already learned more than a few things from him just by listening to him&#160; speak or conduct a meeting (or by watching him beat up a job candidate…). For example,&#160; one CAN be “positive, but not marketing-ish,” even if situation is difficult. If one has an issue, one has to face it with no sugarcoating rather than ’play’ positive and pretend the issue is not there. One can have BOTH a driving vision AND be attentive to customers. One CAN release something when it is ready, not a year before :-) Etc, etc.</p>  <p>Finally, while <em>some</em> choose to lay people off, we at <a href="http://www.qualys.com">Qualys</a>&#160; <a href="http://www.qualys.com/company/careers/">ARE HIRING</a>!&#160; <a href="http://www.qualys.com/company/careers/">Come join us</a> and help build the SaaS security platform that actually works! Specifically, we are looking for <a href="http://www.qualys.com/company/careers/sales/">TAMs</a> (kind like an SE, but better :-)), <a href="http://www.qualys.com/company/careers/marketing/">PMs</a> and <a href="http://www.qualys.com/company/careers/engineering/">a lot of engineers</a>.</p>  <div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=kFQCN"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=kFQCN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=makoN"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=makoN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=xnyHN"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=xnyHN" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/456479091" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 17 Nov 2008 11:07:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/business people">business people</category>
      <category domain="http://securityratty.com/tag/speech">speech</category>
      <category domain="http://securityratty.com/tag/content-free speech">content-free speech</category>
      <category domain="http://securityratty.com/tag/ceo keynote">ceo keynote</category>
      <category domain="http://securityratty.com/tag/speeches">speeches</category>
      <category domain="http://securityratty.com/tag/ceos">ceos</category>
      <category domain="http://securityratty.com/tag/positive">positive</category>
      <category domain="http://securityratty.com/tag/held ceos">held ceos</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/456479091/on-inspiration-and-security.html">On Inspiration and Security</source>
    </item>
    <item>
      <title><![CDATA[Alcatel-Lucent posts $52M loss in Q3]]></title>
      <link>http://securityratty.com/article/4942381c43b9a4ddaf3089771fa52ab0</link>
      <guid>http://securityratty.com/article/4942381c43b9a4ddaf3089771fa52ab0</guid>
      <description><![CDATA[Alcatel-Lucent posted a net loss of $52 million for the third quarter as sales to carriers dropped, although the loss is smaller than a year...]]></description>
      <content:encoded><![CDATA[Alcatel-Lucent posted a net loss of $52 million for the third quarter as sales to carriers dropped, although the loss is smaller than a year ago.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:9dde9abb3fc8e75396ea9229c84416fe:uJjNhTxJH33CidhqWdQaCabx8kFWZB9ICDyEvJMKtVtQ7gUvfIoFfCNapUZXuK6ksUMi8giG%2Bv04'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:79c46e74892332ff1b26413ebef0b5d0:bO50DhSQ83bG6%2Bf3cTsCTKoOTK6qDjQiMr0NDoM5wk%2BVvKj3%2FmikJ%2B%2FfKSkF1yP7Qpt8TorGepBGNw%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:cd3e62c1561c68c23c1b5fee2b76c1d3:%2FuAYGWZInUQirFDHNFOBmk24Z4VlgJjJCOytVYE74GIxIlDqRdj2A84voIIl%2F0M%2FdgWkx8lGsgG%2FdA%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:14c7efb74a0bbae526ef3685346c7e7a:ga9RJi5fMOWyt3wGv9q9E135jYMOfG%2BHCFl%2FoiB%2ByTppXDfXyP1B7Odv9P43Yy9n8swSorgkmdBhtA%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>      <a href="http://www.pheedo.com/feeds/ht.php?t=c&amp;i=4de1524f3a19585f4fff93628f361a91"><img src="http://www.pheedo.com/feeds/ht.php?t=v&amp;i=4de1524f3a19585f4fff93628f361a91" border="0" /></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=4de1524f3a19585f4fff93628f361a91" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Thu, 30 Oct 2008 01:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/loss">loss</category>
      <category domain="http://securityratty.com/tag/net loss">net loss</category>
      <category domain="http://securityratty.com/tag/alcatel-lucent">alcatel-lucent</category>
      <category domain="http://securityratty.com/tag/carriers">carriers</category>
      <category domain="http://securityratty.com/tag/sales">sales</category>
      <category domain="http://securityratty.com/tag/quarter">quarter</category>
      <category domain="http://securityratty.com/tag/ago">ago</category>
      <category domain="http://securityratty.com/tag/million">million</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=4de1524f3a19585f4fff93628f361a91">Alcatel-Lucent posts $52M loss in Q3</source>
    </item>
    <item>
      <title><![CDATA[Money Mules Syndicate Actively Recruiting Since 2002]]></title>
      <link>http://securityratty.com/article/a33470c5ef01ff61333511853f9e63cc</link>
      <guid>http://securityratty.com/article/a33470c5ef01ff61333511853f9e63cc</guid>
      <description><![CDATA[Money mules have already been an inseparable part of the underground ecosystem. And while others try to hide their activities by outsourcing their hosting needs to botnet masters partitioning their...]]></description>
      <content:encoded><![CDATA[<a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SQcPr1E8aJI/AAAAAAAACYE/NAdxaAzEnw8/s1600-h/money_mules_syndicate_U.S_U.K.bmp" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SQcPr1E8aJI/AAAAAAAACYE/6noTDuaSIow/s320-R/money_mules_syndicate_U.S_U.K.bmp" /></a>Money mules have already been an inseparable part of the underground ecosystem. And while others try to hide their activities by <a href="http://ddanchev.blogspot.com/2008/07/money-mule-recruiters-use-asproxs-fast.html">outsourcing their hosting needs to botnet masters partitioning their botnets</a>, the experienced ones apply a decent level of OPSEC (operational security) by establishing a trust based model based on recommendations in order to even consider letting you register for their services. Their geographical location not only reflects the average time it would take to take action against their activities and expose yet another extensive network of fraudulent operations, but also, has the potential to increase or decrease the commissions that the mules take based on the risk factor of getting caught.<br />
<br />
There are several different types of money mules, those serving themselves, and those offering their services to others, in this particular case, we have a money mules syndicate that's been operating since 2002, and is only serving the high profile customers. What happens when such a money mule syndicate (naturally) starts vertically integrating by offering value-added services like credit card balance checking and date of birth lookups? Profits apparently increase, since the syndicate is actively recruiting and is currently looking for 20 to 30 mules -- their current staff is said to be approximately 100 people -- to cash out anything from bank account logins, Paypal accounts, to stolen credit card data. Here's a translated description of the service :<br />
<br />
<b>"<i>Who we are?</i></b><i><br />
</i><br />
<i>- First place at (cyber crime community) top list of trusted service providers for 2008</i><br />
<i>- We serve the big guys only since 2002</i><br />
<i>- We never scam, in business since 2002 without a single scam complaint</i><br />
<i>- We look for you, you don't look for us</i><br />
<i>- We offer outstanding working conditions and high commissions<b>&nbsp;</b></i><br />
<br />
<i><b>Who you should be?</b></i><br />
<i>- Dedicated person with experience in the field</i><br />
<i>- Have been in the business for at least 6 months</i><br />
<i>- Have been recommended by at least 1 person from (cybercrime community) and from (cybercrime community)</i><br />
<i>- You take 45% commission of the processed check, minimal amount is $3000</i><br />
<i>- You pay a membership fee</i><br />
<br />
<i>In the next two months we draw the command of 20-30 people who will most satisfy our requirements. For the selected team will be Paradise conditions:</i><br />
<br />
<i>- Instant payment (a few hours after delivered)  <br />
- Large numbers to drop service in the USA and the UK (30)  <br />
- Individual drop in the number of large islands  <br />
- 3-5 fresh weekly drop<br />
- Round-the-clock support</i>"  <br />
<br />
In case some of their customers get scammed -- appreciate the irony here as scammers compensate the scammers getting scammed by the scammer's outsourced personnel -- by some of their money mules, the service is offering compensation for the stolen goods/amount of money, clearly speaking for the revenues it is to prone to be generating. OPSEC (Operational Security) has been taking place across high-profile cybercrime communities during the last quarter, mostly in response to their increasing awareness that in the very same way they keep track of the major anti-fraud features implemented across their services of (ab)use, those implementing them could be monitoring them as well.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=fGWOM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=fGWOM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=f3mhM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=f3mhM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Wr9Sm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Wr9Sm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=f0Zkm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=f0Zkm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=i6KYM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=i6KYM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=7W3IM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=7W3IM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sc0Km"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sc0Km" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/434724736" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 28 Oct 2008 05:44:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/money mules">money mules</category>
      <category domain="http://securityratty.com/tag/money">money</category>
      <category domain="http://securityratty.com/tag/mules">mules</category>
      <category domain="http://securityratty.com/tag/drop service">drop service</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/service providers">service providers</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/scam">scam</category>
      <category domain="http://securityratty.com/tag/cybercrime community">cybercrime community</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/434724736/money-mules-syndicate-actively.html">Money Mules Syndicate Actively Recruiting Since 2002</source>
    </item>
    <item>
      <title><![CDATA[Click fraud at 16 percent as scammers resort to botnets]]></title>
      <link>http://securityratty.com/article/0b8640c9ade31a342c52bfd81f6588dc</link>
      <guid>http://securityratty.com/article/0b8640c9ade31a342c52bfd81f6588dc</guid>
      <description><![CDATA[The incidence of click fraud, the bane of the highly profitable search advertising business to which Google owes its success, fell slightly in the third quarter, but remains a serious...]]></description>
      <content:encoded><![CDATA[The incidence of click fraud, the bane of the highly profitable search advertising business to which Google owes its success, fell slightly in the third quarter, but remains a serious problem.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=70863?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=70863?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Wed, 22 Oct 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/click fraud">click fraud</category>
      <category domain="http://securityratty.com/tag/highly profitable">highly profitable</category>
      <category domain="http://securityratty.com/tag/google owes">google owes</category>
      <category domain="http://securityratty.com/tag/success">success</category>
      <category domain="http://securityratty.com/tag/incidence">incidence</category>
      <category domain="http://securityratty.com/tag/quarter">quarter</category>
      <category domain="http://securityratty.com/tag/bane">bane</category>
      <category domain="http://securityratty.com/tag/remains">remains</category>
      <category domain="http://securityratty.com/tag/slightly">slightly</category>
      <source url="http://www.networkworld.com/news/2008/102308-click-fraud-at-16-percent.html?fsrc=rss-security">Click fraud at 16 percent as scammers resort to botnets</source>
    </item>
    <item>
      <title><![CDATA[Links List 10.17.08]]></title>
      <link>http://securityratty.com/article/794a0935dd027c6a33ce5d3ef58fb2e3</link>
      <guid>http://securityratty.com/article/794a0935dd027c6a33ce5d3ef58fb2e3</guid>
      <description><![CDATA[Novell announced this week its intent to purchase Managed Objects . We really didnt see this coming. Novell? Cant quite figure out the master plan here. I mean, they said theyd acquire PlateSpin back...]]></description>
      <content:encoded><![CDATA[<p>Novell announced this week its <a href="http://www.networkworld.com/community/node/33996">intent to purchase Managed Objects</a>. We really didn’t see this coming. Novell? Can’t quite figure out the master plan here. I mean, they said they’d acquire <a href="http://dcsblog.burtongroup.com/data_center_strategies/2008/02/novell-makes-a.html">PlateSpin</a> back in February which made a lot of sense for bridging the gap of physical to virtual and building out a management portfolio beyond ZENworks Orchestrator. But Managed Objects? CMDBs? In this economy? We have to think back to the survey [link to survey post] we just did at Interop NY and the low scores – on importance and actual deployments – that CMDBs got. When it comes to tightening the belt, CMDBs kinda fell off the list. We’ll be looking forward to future announcements to see how this plays out. </span></p>
<p>Martin MC Brown at ComputerWorld has a great post on <a href="http://blogs.computerworld.com/capacity_planning_and_the_cloud">capacity planning and cloud computing</a>. He discusses a new book “The Art of Capacity Planning”. The problem with the current model of data center management is that often a large number of machines may sit relatively idle while waiting for the traffic spike that causes them to be used. This is a problem because it’s simply a waste of time and resources on a whole number of levels. Enter the cloud – or at least the “hope of cloud computing”.</span></p>
<p>Numbers – what do they really mean? IDC released a statement with a whole bunch of them from their “<a href="http://www.idc.com/getdoc.jsp;jsessionid=FT0ISDWWAPJ4SCQJAFDCFFAKBEAVAIWD?containerId=prUS21473108">Worldwide Quarterly Server Virtualization Tracker</a>”. <span> </span>The most interesting stat: x86 Virtualization License Market Standings. VMware owns 44% of the market, but Microsoft, in its first quarter of general availability for Microsoft Hyper-V (plus Virtual Server 2005), has <a href="http://www.virtualization.info/2008/10/microsoft-already-took-23-of.html">23% of the market</a> of new shipments. </span></p>
]]></content:encoded>
      <pubDate>Fri, 17 Oct 2008 23:26:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/post">post</category>
      <category domain="http://securityratty.com/tag/data center management">data center management</category>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/microsoft hyper-v">microsoft hyper-v</category>
      <category domain="http://securityratty.com/tag/cmdbs">cmdbs</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/virtual server">virtual server</category>
      <category domain="http://securityratty.com/tag/survey post">survey post</category>
      <category domain="http://securityratty.com/tag/virtual">virtual</category>
      <source url="http://blog.sciencelogic.com/links-list-101708/10/2008">Links List 10.17.08</source>
    </item>
    <item>
      <title><![CDATA[Google miffs admins, IT boosts Street]]></title>
      <link>http://securityratty.com/article/0711c044c77f310f395a891d5b431a56</link>
      <guid>http://securityratty.com/article/0711c044c77f310f395a891d5b431a56</guid>
      <description><![CDATA[Google annoyed administrators when it made changes to Google Apps &quot;Start&quot; portal pages without letting them know it was updating layout and functionality of those pages. Some administrators reported...]]></description>
      <content:encoded><![CDATA[Google annoyed administrators when it made changes to Google Apps "Start" portal pages without letting them know it was updating layout and functionality of those pages. Some administrators reported at a discussion forum that they were swamped with angry calls from end users who couldn't access Gmail accounts. On a slightly brighter note, Google reported solid quarterly earnings, as did IBM and Intel, but there's plenty of room for concern about the current quarter and coming quarters. Meanwhile, Mozilla continues work on its mobile browser, code-named Fennec, which was released in alpha this week for use on Nokia Internet tablets.]]></content:encoded>
      <pubDate>Thu, 16 Oct 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/google apps">google apps</category>
      <category domain="http://securityratty.com/tag/solid quarterly earnings">solid quarterly earnings</category>
      <category domain="http://securityratty.com/tag/portal pages">portal pages</category>
      <category domain="http://securityratty.com/tag/nokia internet tablets">nokia internet tablets</category>
      <category domain="http://securityratty.com/tag/access gmail accounts">access gmail accounts</category>
      <category domain="http://securityratty.com/tag/slightly brighter note">slightly brighter note</category>
      <category domain="http://securityratty.com/tag/pages">pages</category>
      <category domain="http://securityratty.com/tag/discussion forum">discussion forum</category>
      <source url="http://www.networkworld.com/news/2008/101708-google-miffs-admins-it-boosts.html?fsrc=rss-security">Google miffs admins, IT boosts Street</source>
    </item>
    <item>
      <title><![CDATA[Oracle CPU - October 2008]]></title>
      <link>http://securityratty.com/article/c8db3508dd757c495002144bb8b063e6</link>
      <guid>http://securityratty.com/article/c8db3508dd757c495002144bb8b063e6</guid>
      <description><![CDATA[Its that time of the quarter again. Oracle just released another CPU, this time with 15 DB vulnerabilities compared with the 11 in the July CPU and 15 in April. There are also some interesting...]]></description>
      <content:encoded><![CDATA[It&#8217;s that time of the quarter again. Oracle just released another CPU, this time with 15 DB vulnerabilities compared with the 11 in the July CPU and 15 in April. There are also some interesting vulnerabilities for Oracle EBS and application server. Sentrigo is represented by Guy Pilosof and myself in the credits section.
The vulnerabilities [...]<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/slaviks-blog/WxxD?a=bU1nM"><img src="http://feeds.feedburner.com/~f/slaviks-blog/WxxD?i=bU1nM" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/slaviks-blog/WxxD/~4/421472985" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 15 Oct 2008 07:08:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cpu">cpu</category>
      <category domain="http://securityratty.com/tag/oracle">oracle</category>
      <category domain="http://securityratty.com/tag/july cpu">july cpu</category>
      <category domain="http://securityratty.com/tag/vulnerabilities">vulnerabilities</category>
      <category domain="http://securityratty.com/tag/oracle ebs">oracle ebs</category>
      <category domain="http://securityratty.com/tag/application server">application server</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/credits section">credits section</category>
      <category domain="http://securityratty.com/tag/guy pilosof">guy pilosof</category>
      <source url="http://feeds.feedburner.com/~r/slaviks-blog/WxxD/~3/421472985/">Oracle CPU - October 2008</source>
    </item>
    <item>
      <title><![CDATA[The Cost of Anonymizing a Cybercriminal's Internet Activities]]></title>
      <link>http://securityratty.com/article/fd85eab125c6402829ffc16856b02c84</link>
      <guid>http://securityratty.com/article/fd85eab125c6402829ffc16856b02c84</guid>
      <description><![CDATA[What would the perfect traffic anonymity service provider targeting cybercriminals consist of? A service operating in Russia that is on purposely not logging any of its user's activities, next to...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SPTye4s5YKI/AAAAAAAACS4/CKFXBuj4jqY/s1600-h/SocksChain_2.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SPTye4s5YKI/AAAAAAAACS4/7lSs6eP0cVg/s200-R/SocksChain_2.png" /></a>What would the perfect traffic anonymity service provider targeting cybercriminals consist of? A service operating in Russia that is on purposely not logging any of its user's activities, next to allowing direct spamming from the socks servers, automatic rotation of the VPN servers which they operate in a RBN style hosting provider, or a service using <a href="http://ddanchev.blogspot.com/2008/02/malware-infected-hosts-as-stepping.html">actual malware infected hosts as VPN tunnels</a> not only securing the cybercrime traffic, but also, forwarding the responsibility for the malicious activities to the end user?<br />
<br />
<div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SPTvdwrn3kI/AAAAAAAACSY/nN14XQ1wNS0/s1600-h/socks_SSLv3_malware.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SPTvdwrn3kI/AAAAAAAACSY/ULGXUGibmBI/s200-R/socks_SSLv3_malware.jpg" /></a>Long gone are the days of socks chaining, the practice of automatically connecting to multiple malware infected hosts in order to use them as stepping stones, in between the rest of the malicious activities going on their behalf.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SPTxVG_07bI/AAAAAAAACSw/LW9-rqYumpk/s1600-h/socks_SSLv3_malware1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SPTxVG_07bI/AAAAAAAACSw/N0wN-6hs5NM/s200-R/socks_SSLv3_malware1.jpg" /></a>The possibilities for building point-to-point or server-to-multiclient encrypted tunnels between malware infected hosts by using already available Socks5 functions has always been there. As of August, the coders behind a relatively popular web based malware originally started as a DDoS kit, but later on started introducing new features on a "module basis", they have started offering a BETA module for building a VPN network of malware infected hosts, including an admin panel for reselling access to these hosts in order to better monetize their botnet.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://4.bp.blogspot.com/_wICHhTiQmrA/SPTwzXsQPsI/AAAAAAAACSo/7gL7-BUZ1AE/s1600-h/socks_SSLv3_malware2.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://4.bp.blogspot.com/_wICHhTiQmrA/SPTwzXsQPsI/AAAAAAAACSo/1h9O1fgTjss/s200-R/socks_SSLv3_malware2.JPG" /></a>This VPN-owning of malware infected hosts is not only resulting in improved anonymity for botnet masters and anyone else having access to the network, but is also contributing to the growth of VPN services designed specifically to be accessed by cybercriminals created on the foundatiosn of such admin panels offering easier reselling of access to the network.<br />
<br />
So, what's the cost of anonymizing a cybercriminal's Internet activities? Starting from $40 and going to $300 for a quarter of access, with the price increasing based on the level of anonymity added.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=H1pTM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=H1pTM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Tk16M"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Tk16M" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=bUqbm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=bUqbm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=N3PCm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=N3PCm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=fCnyM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=fCnyM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=AgA7M"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=AgA7M" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=lIoUm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=lIoUm" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/420832417" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 14 Oct 2008 10:27:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/activities">activities</category>
      <category domain="http://securityratty.com/tag/internet activities">internet activities</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/actual malware">actual malware</category>
      <category domain="http://securityratty.com/tag/hosts">hosts</category>
      <category domain="http://securityratty.com/tag/multiple malware">multiple malware</category>
      <category domain="http://securityratty.com/tag/malicious activities">malicious activities</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/vpn network">vpn network</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/420832417/cost-of-anonymizing-cybercriminals.html">The Cost of Anonymizing a Cybercriminal's Internet Activities</source>
    </item>
    <item>
      <title><![CDATA[Innovators, Imitators and Idiots]]></title>
      <link>http://securityratty.com/article/9f0fb5a40e7304e54d82bd150f69993b</link>
      <guid>http://securityratty.com/article/9f0fb5a40e7304e54d82bd150f69993b</guid>
      <description><![CDATA[Charlie Rose interviews Warren Buffett


Charlie Rose
And so when you look at where we are going, there seems to be two issues that are apparent to me at least, risk and leverage. We just lost sight...]]></description>
      <content:encoded><![CDATA[<p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong><div><span style="font-weight: normal;">Charlie Rose <a href="http://www.cnbc.com/id/26982338/page/2/">interviews</a> Warren Buffett:</span></div><div><span style="font-weight: normal;"><br /></span></div></strong></span></p><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Charlie Rose:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">And so when you look at where we are going, there seems to be two issues that are apparent to me at least, risk and leverage.&#0160; We just lost sight of risk and leverage of what was appropriate?</span></p><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Warren Buffett:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">Yeah.&#0160; Again, because it pays off for a while.&#0160; You know, you can lose leverage, and it&#39;s the only way a smart guy can go broke.&#0160; If you owe money, you can&#39;t pay them out.&#0160; You just pay for everything, you do smart things, you eventually get very rich.&#0160; If you do smart things and use leverage and do one wrong thing along the way, it could wipe you out, because anything times zero is zero.&#0160; But it&#39;s reinforcing when the people around you are doing it successfully, you&#39;re doing it successfully, and it&#39;s a lot like Cinderella at the ball.&#0160; I mean you know at midnight everything is going to turn to pumpkins and mice; right?&#0160; But if the evening goes along, I mean, you know, the guys look better all the time, the music sounds better, it&#39;s more and more fun, you think why the hell should I leave at quarter of 12.&#0160; I&#39;ll leave at two minutes to 12.&#0160; But the trouble is, there are no clocks on the wall.&#0160; And everybody thinks they&#39;re going to leave at two minutes to 12.</span></p></blockquote><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong><div><span style="font-weight: normal;"><br /></span></div><div><span style="font-weight: normal;">Its effectively the job of leadership to know when to take the punch bowl away and to have the credibility to do this. This is also the risk-reward balance that infosec must try to strike, part of the answer is differentiating <a href="http://1raindrop.typepad.com/1_raindrop/2007/11/dhandho-infosec.html">risk and uncertainty</a>. As our current financial situation shows, its a hard thing to pull off</span></div><div><span style="font-weight: normal;"><br /></span></div></strong></span></p><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Charlie Rose:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">And should wise people have known better?</span></p><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Warren Buffett:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">People should always know better.</span></p><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Charlie Rose:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">Yeah.</span></p><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Warren Buffett:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">I mean people -- people don&#39;t get -- they don&#39;t get smarter about things that get as basic as greed and you can&#39;t stand to see your neighbor getting rich.&#0160; You know you&#39;re smarter than he is, and he&#39;s doing these things, you know, and he&#39;s getting rich, and your spouse is getting unhappy with you because you aren&#39;t doing -- pretty soon you start doing it.&#0160; And so you get what I call the natural progression, the three Is.&#0160; The innovators, the imitators, and the idiots.&#0160; And that&#39;s what happens.&#0160; Everybody just kind of goes along.&#0160; And you look kind of silly if you disagree.&#0160; I mean, you know, you could have these crazy Internet valuations in the late 1990s, but they prove themselves out in the market.&#0160; The next day they were selling for more than they were the day before, and people said, you know, you&#39;re crazy if you don&#39;t get in on this.&#0160; So it&#39;s very human.&#0160; Now, with housing it&#39;s something even more dramatic than that, because most people aspire to own their own home.&#0160; And if you really think that houses prices are going to go up next year and the year after, you feel if I don&#39;t buy it this year, I&#39;m going to have to buy it next year.&#0160; That&#39;s not true of an Internet stock.&#0160; But it&#39;s true of a home.&#0160; And when somebody makes it very easy for you to do it by saying you don&#39;t really have to put up my money, you can lie about your income a little, or we&#39;ll give you 100 percent mortgage, you&#39;re going to do it, because everybody that&#39;s done it has been proven right.&#0160; You have what they call social tools, and, you know, you&#39;re going to feel like an idiot if you didn&#39;t do it, because the house cost more.</span></p></blockquote><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong><div><span style="font-weight: normal;"><br /></span></div><div><span style="font-weight: normal;">And this is why its hard to pull off. There is a lot of human emotion and envy (*). I think the point Buffett raises about innovators, imitators and idiots is a useful one for infosec. We see all kinds of new projects and technologies that have risks and rewards associated with them, its helpful to categorize these under innovation (high risk but possible game changer), imitators (so called best practices), and idiots (sheep mode - blind risk acceptance). We can get some traction here to use these concepts to understand what to do when assessing say the architectural and oeprational risk of a system.</span></div><div><span style="font-weight: normal;"><br /></span></div><div><span style="font-weight: normal;">Finally, we should always spend some time to consider infosec decisions in a broader long term economic context and this is also true of our current financial crisis</span></div><div><span style="font-weight: normal;"><br /></span></div></strong></span></p><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; font-size: 12px; line-height: normal; "><strong>Warren Buffett:</strong>&#0160;&#0160;</span><br /><span style="font-family: Verdana; font-size: 12px; line-height: normal; ">Oh, I think confidence will come back.&#0160; I will tell you this.&#0160; This country is going -- be living better ten years from now than it is now.&#0160; It will be living better in 20 years from now than ten years from now.&#0160; The ingredients that made this country, you know, the miracle of the world -- I mean we had a seven for one improvement in the average American standard of living in the 20th century.&#0160; Now, we had the great depression, we had two world wars, we had the flu epidemic.&#0160; You know, we had oil shock.&#0160; You know, we had all these terrible things happen.&#0160; But something about the American system unleashed more and of a potential to human beings over that hundred years so that we had a seven for one improvement in -- there&#39;s never been any -- I mean, you have centuries where if you&#39;ve got a 1 percent improvement, then it&#39;s something.&#0160; So we&#39;ve got a great system.&#0160; And we&#39;ve got more productive capacity now than we ever have.&#0160; The American worker is more productive than he&#39;s ever been.&#0160; We&#39;ve got more people to do it.&#0160; We&#39;ve got all the ingredients for a sensational future.&#0160; It&#39;s just that right now the athlete&#39;s on the floor.&#0160; But we -- this is a super athlete.</span></p></blockquote><div><span style="font-family: Verdana; font-size: 12px; line-height: normal;"><br /></span></div><div><span style="font-family: Verdana; font-size: 12px; line-height: normal;">Again, we want to look at risk events in a broader, long term context. In Buffett&#39;s words its - &quot;be fearful when others are greedy and greedy when others are fearful.&quot; As the world panics and Jim Cramer is melting down on TV, Buffett is quietly writing checks with both hands, buying $3B of GE, $5B of Goldman, $6.5 of Wrigley/Mars and so on. Uncertainty is one thing, it could be 6 months it could be 5 years until this thing turns around, but risk is another - you hedge your risk with price and long term advantages, i.e. moats. People will still eat candy in a bad economy.</span></div><div><span style="font-family: Verdana; font-size: 12px; line-height: normal;"><br /></span></div><div><span style="font-family: Verdana; font-size: 12px; line-height: normal;">* Buffett&#39;s partner Charlie Munger calls envy the stupidest of the seven deadly sins, because only you feel bad, there is an upside to all the others. He said you can pay someone on Wall St $2 million a year and they will be perfectly happy until they find out someone across the hall is making $2.1 million and then they will be miserable. Which is an insane way tolive.</span></div>]]></content:encoded>
      <pubDate>Tue, 07 Oct 2008 04:32:33 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/oeprational risk">oeprational risk</category>
      <category domain="http://securityratty.com/tag/risk events">risk events</category>
      <category domain="http://securityratty.com/tag/risk-reward balance">risk-reward balance</category>
      <category domain="http://securityratty.com/tag/wise people">wise people</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/buffett raises">buffett raises</category>
      <category domain="http://securityratty.com/tag/buffett">buffett</category>
      <category domain="http://securityratty.com/tag/blind risk acceptance">blind risk acceptance</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/10/innovators-imitators-and-idiots.html">Innovators, Imitators and Idiots</source>
    </item>
    <item>
      <title><![CDATA[PCI Bans WEP SecurityStarting 2010]]></title>
      <link>http://securityratty.com/article/5f38b99c3f2e614c14cdba03311ea183</link>
      <guid>http://securityratty.com/article/5f38b99c3f2e614c14cdba03311ea183</guid>
      <description><![CDATA[Version 1.2 for the PCI Data Security Standard was released last week
One interesting outcome is that the insecure wireless WEP protocol will be banned but not until June 2010. Says Ars Technica...]]></description>
      <content:encoded><![CDATA[<p>Version 1.2 for the PCI Data Security Standard was released last week.</p>
<p>One interesting outcome is that the insecure wireless <a rel="nofollow" target="_blank" href="http://arstechnica.com/news.ars/post/20081003-credit-card-processors-finally-get-clue-will-ban-wep.html">WEP</a> protocol will be <a rel="nofollow" target="_blank" href="http://wifinetnews.com/archives/008474.html">banned</a>&#8230;but not until June 2010. Says <a rel="nofollow" target="_blank" href="http://arstechnica.com/news.ars/post/20081003-credit-card-processors-finally-get-clue-will-ban-wep.html">Ars Technica</a>:</p>
<blockquote><p>Although TJX has become the poster-child for consumer data theft over WiFi, it is (by far) not the only company to use insecure wireless technologies. Wireless security manufacturer AirDefense released a report in late 2007 saying that a quarter of the 4,748 retail access points it surveyed across the US had no security whatsoever, while another quarter only used WEP, &#8220;one of the weakest protocols for wireless data encryption.&#8221; Just under half (49 percent) of the surveyed hotspots used WiFi Protected Access (WPA) or WPA 2—much stronger encryption protocols than WEP.</p></blockquote>
<p>If you&#8217;re wondering about what other impacts will have, you might want to read through the <a rel="nofollow" target="_blank" href="https://www.pcisecuritystandards.org/security_standards/supporting_documents.shtml">PCI site</a> or sign up for the<a rel="nofollow" target="_blank" href="http://www.secureworks.com/research/webcasts/20081014-gen-www"> SecureWorks webcast </a>on October 14th to learn more.</p>]]></content:encoded>
      <pubDate>Mon, 06 Oct 2008 05:38:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wep">wep</category>
      <category domain="http://securityratty.com/tag/insecure wireless technologies">insecure wireless technologies</category>
      <category domain="http://securityratty.com/tag/wireless data encryption">wireless data encryption</category>
      <category domain="http://securityratty.com/tag/access">access</category>
      <category domain="http://securityratty.com/tag/retail access">retail access</category>
      <category domain="http://securityratty.com/tag/consumer data theft">consumer data theft</category>
      <category domain="http://securityratty.com/tag/secureworks webcast">secureworks webcast</category>
      <category domain="http://securityratty.com/tag/quarter">quarter</category>
      <category domain="http://securityratty.com/tag/security whatsoever">security whatsoever</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/412950080/">PCI Bans WEP SecurityStarting 2010</source>
    </item>
  </channel>
</rss>
