<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: recruits]]></title>
    <link>http://securityratty.com/tag/recruits</link>
    <description></description>
    <pubDate>Sun, 20 Jan 2008 11:51:19 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Security's connections and intersections]]></title>
      <link>http://securityratty.com/article/4decd009313212d53a0fb4161271eba1</link>
      <guid>http://securityratty.com/article/4decd009313212d53a0fb4161271eba1</guid>
      <description><![CDATA[Security is perhaps the most difficult intellectual profession on the planet. The core knowledge base has reached the point where new recruits can no longer hope to be competent generalists; serial...]]></description>
      <content:encoded><![CDATA[Security is perhaps the most difficult intellectual profession on the planet. The core knowledge base has reached the point where new recruits can no longer hope to be competent generalists; serial specialization is the only broad option available to them.]]></content:encoded>
      <pubDate>Sun, 28 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/core knowledge base">core knowledge base</category>
      <category domain="http://securityratty.com/tag/difficult intellectual profession">difficult intellectual profession</category>
      <category domain="http://securityratty.com/tag/competent generalists">competent generalists</category>
      <category domain="http://securityratty.com/tag/serial specialization">serial specialization</category>
      <category domain="http://securityratty.com/tag/broad option">broad option</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/hope">hope</category>
      <category domain="http://securityratty.com/tag/recruits">recruits</category>
      <category domain="http://securityratty.com/tag/planet">planet</category>
      <source url="http://www.networkworld.com/news/2008/092908-securitys-connections-and.html?fsrc=rss-security">Security's connections and intersections</source>
    </item>
    <item>
      <title><![CDATA[Over 80 percent of Storm Worm Spam Sent by Pharmaceutical Spam Kings]]></title>
      <link>http://securityratty.com/article/ea68adf4b019a71c0112661ffc8d8bf1</link>
      <guid>http://securityratty.com/article/ea68adf4b019a71c0112661ffc8d8bf1</guid>
      <description><![CDATA[It used to be a case where a botnet would be used for a single purpose, spamming, phishing, or malware spreading. At a later stage, the steady supply of malware infected allowed botnet masters more...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="text-align: center; clear: both;"></div><a href="http://bp2.blogger.com/_wICHhTiQmrA/SI3DACirIII/AAAAAAAAB-M/mbToBJwm1uU/s1600-h/storm_pharma.png" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp2.blogger.com/_wICHhTiQmrA/SI3DACirIII/AAAAAAAAB-M/YWIdXnUoPoU/s200-R/storm_pharma.png" style="border: 0pt none ;" /></a>It used to be a case where a botnet would be used for a single purpose, spamming, phishing, or malware spreading. At a later stage, the steady supply of malware infected allowed botnet masters more opportunities to "sacrifice" the clean IP reputation and engage in several malicious activities simultaneously - <a href="http://ddanchev.blogspot.com/2008/06/underground-multitasking-in-action.html">today's underground multitasking</a> improving the monetization of what used to be commodity goods and services.<br />
<br />
Today, a botnet will not only be <a href="http://ddanchev.blogspot.com/2008/02/inside-botnets-phishing-activities.html">sending out phishing emails</a>, automatically <a href="http://blogs.zdnet.com/security/?p=1122">SQL inject vulnerable sites across the web</a>, but also, provide <a href="http://ddanchev.blogspot.com/2008/07/money-mule-recruiters-use-asproxs-fast.html">fast-flux infrastructure to money mule recruitment services</a>, all of this for the sake of optimizing the efficiency provided by the botnet in general. This <a href="http://ddanchev.blogspot.com/2007/10/botnet-on-demand-service.html">optimization makes it possible for a single botnet to be partitioned</a> and access it it <a href="http://ddanchev.blogspot.com/2008/03/loadsccs-ddos-for-hire-service.html">sold and resold so many times</a>, that it would be hard to keep track of all the malicious activities it participates in. Cybercrime in between on multiple fronts using a single botnet is only starting to take place as concept.<br />
<br />
That's the case with Stormy Wormy, according to IronPort whose "<a href="http://www.darkreading.com/document.asp?doc_id=156139&amp;WT.svl=news1_1">Researchers Link Storm Botnet to Illegal Pharmaceutical Sales</a>" : <br />
<br />
"<i>Our previous research revealed an extremely sophisticated supply chain behind the illegal pharmacy products shipped after orders were placed on botnet-spammed Canadian pharmacy websites. <b>But the relationship between the technology-focused botnet masters and the global supply chain organizations was murky until now</b>," said Patrick Peterson, vice president of technology at IronPort and a Cisco fellow. "Our research has revealed a smoking gun that shows that Storm and other botnet spam generates commissionable orders, which are then fulfilled by the supply chains, generating revenue in excess of (US)$150 million per year.</i>"<br />
<br />
Murky until now? I can barely see in the room due to all the smoke coming from the smoking guns of who's what, what's when, and who's done what with who, especially in respect to Storm Worm whose multitasking on different fronts in the first stages of their appearance online made it possible to establish links between several different malware groups and the "upstream hosting providers", until the botnet scaled enough making it harder to keep track of all of their activities.<br />
<br />
<a href="http://www.ironport.com/malwaretrends/">The Storm Worm-ers themselves aren't sending out pharma spam</a>, the customers to whom they've sold access to parts of Storm Worm are the ones sending the pharma spam. Here's a brief analysis published in May - "<a href="http://ddanchev.blogspot.com/2008/05/storm-worm-hosting-pharmaceutical-scams.html">Storm Worm Hosting Pharmaceutical Scams</a>". What's in it for the scammers? Income based on a revenue-sharing affiliate program, <a href="http://ddanchev.blogspot.com/2007/10/incentives-model-for-pharmaceutical.html">a pharmacy affiliate program</a> has been around for several years :<br />
<br />
"<i>This criminal organization recruits botnet spamming partners to advertise their illegal pharmacy websites, which receive a 40 percent commission on sales orders. The organization offers fulfillment of the pharmaceutical product orders, credit card processing and customer support services</i>" <br />
<br />
What's coming out of Storm Worm's botnet isn't necessarily coming from the hardcore Storm Worm-ers whose job today is more of a campaign-rotation related in order to ensure new bots are added, what's coming out of Storm Worm is coming from those <a href="http://it.slashdot.org/article.pl?sid=07/10/16/155209">using the access they've purchased to a part of the botnet</a>.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/05/storm-worm-hosting-pharmaceutical-scams.html">Storm Worm Hosting Pharmaceutical Scams</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/all-you-need-is-storm-worms-love.html">All You Need is Storm Worm's Love</a><br />
<a href="http://ddanchev.blogspot.com/2007/01/social-engineering-and-malware.html">Social Engineering and Malware</a><br />
<a href="http://ddanchev.blogspot.com/2007/02/storm-worm-switching-propagation.html">Storm Worm Switching Propagation Vectors</a><br />
<a href="http://ddanchev.blogspot.com/2007/08/storm-worms-use-of-dropped-domains.html">Storm Worm's use of Dropped Domains</a><br />
<a href="http://ddanchev.blogspot.com/2007/08/offensive-storm-worm-obfuscation.html">Offensive Storm Worm Obfuscation</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/storm-worms-fast-flux-networks.html">Storm Worm's Fast Flux Networks</a><br />
<a href="http://ddanchev.blogspot.com/2008/01/storm-worms-st-valentine-campaign.html">Storm Worm's St. Valentine Campaign</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/storm-worms-ddos-attitude.html">Storm Worm's DDoS Attitude</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/riders-on-storm-worm.html">Riders on the Storm Worm</a><br />
<a href="http://ddanchev.blogspot.com/2007/08/storm-worm-malware-back-in-game.html">The Storm Worm Malware Back in the Game</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=TUN7jJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=TUN7jJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=QEqwBJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=QEqwBJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=FeC9Rj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=FeC9Rj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=b6c7oj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=b6c7oj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=iJ3LCJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=iJ3LCJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=zhsGWJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=zhsGWJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=HuQaxj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=HuQaxj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/349239892" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 28 Jul 2008 23:29:54 +0000</pubDate>
      <category domain="http://securityratty.com/tag/storm worm">storm worm</category>
      <category domain="http://securityratty.com/tag/storm worm malware">storm worm malware</category>
      <category domain="http://securityratty.com/tag/storm">storm</category>
      <category domain="http://securityratty.com/tag/hardcore storm worm-ers">hardcore storm worm-ers</category>
      <category domain="http://securityratty.com/tag/storm worm-ers">storm worm-ers</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/botnet">botnet</category>
      <category domain="http://securityratty.com/tag/botnet masters">botnet masters</category>
      <category domain="http://securityratty.com/tag/botnet spam">botnet spam</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/349239892/over-80-percent-of-storm-worm-spam-sent.html">Over 80 percent of Storm Worm Spam Sent by Pharmaceutical Spam Kings</source>
    </item>
    <item>
      <title><![CDATA[Can The Gov Be Trusted With Your Personal Data?]]></title>
      <link>http://securityratty.com/article/f09583068525ca2d56abe689ff8ea4e0</link>
      <guid>http://securityratty.com/article/f09583068525ca2d56abe689ff8ea4e0</guid>
      <description><![CDATA[Survey says(insert buzzer noise
Faith in the (UK) govs ability to securely manage personal data is out the window
From Reuters
The inquiries followed Britains biggest data loss scandal, when two discs...]]></description>
      <content:encoded><![CDATA[<p>Survey says&#8230;(insert buzzer noise)</p>
<p>Faith in the (UK) gov&#8217;s ability to securely manage personal data is out the window. </p>
<p>From Reuters:</p>
<blockquote><p>The inquiries followed Britain’s biggest data loss scandal, when two discs containing child benefit records, including names, addresses and bank details, of some 25 million people, went missing after being put in the post by a junior employee.</p>
<p>The reports concluded that it wasn’t individuals who were to blame - some 30 were officials played some role in events leading to the loss of the discs - but institutional and systematic failures at Britain’s tax authority.</p>
<p>But the HMRC is not alone in such security breaches. A separate report into a stolen laptop containing the details of 600,000 potential recruits revealed similar failings at the Ministry of Defence. In all, four MoD computers had been stolen since 2004 and the report said the MoD was probably in breach of several principles set out in the Data Protection Act.</p></blockquote>
<p>Well, where do you stand? Do you trust your respective government not to punt on data security? </p>
<p>Read on.</p>
<p><a href="http://blogs.reuters.com/uknews/2008/06/25/can-the-government-be-trusted-with-your-personal-data/">Article Link</a></p>

<p><a href="http://feeds.feedburner.com/~a/Liquidmatrix?a=770kXb"><img src="http://feeds.feedburner.com/~a/Liquidmatrix?i=770kXb" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=pFZPzI"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=pFZPzI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=hm8i3i"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=hm8i3i" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=pnvfai"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=pnvfai" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=en11wi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=en11wi" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/Liquidmatrix?a=EkCewi"><img src="http://feeds.feedburner.com/~f/Liquidmatrix?i=EkCewi" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/Liquidmatrix/~4/320499028" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 26 Jun 2008 08:44:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/loss">loss</category>
      <category domain="http://securityratty.com/tag/data loss scandal">data loss scandal</category>
      <category domain="http://securityratty.com/tag/britains">britains</category>
      <category domain="http://securityratty.com/tag/britains tax authority">britains tax authority</category>
      <category domain="http://securityratty.com/tag/data protection act">data protection act</category>
      <category domain="http://securityratty.com/tag/details">details</category>
      <category domain="http://securityratty.com/tag/child benefit records">child benefit records</category>
      <category domain="http://securityratty.com/tag/mod computers">mod computers</category>
      <category domain="http://securityratty.com/tag/bank details">bank details</category>
      <source url="http://feeds.feedburner.com/~r/Liquidmatrix/~3/320499028/">Can The Gov Be Trusted With Your Personal Data?</source>
    </item>
    <item>
      <title><![CDATA[Military Recruits Thousands More Warbots for New Unmanned Surge]]></title>
      <link>http://securityratty.com/article/f25041e3c2400c2a725f78fe79464a2e</link>
      <guid>http://securityratty.com/article/f25041e3c2400c2a725f78fe79464a2e</guid>
      <description><![CDATA[Up to 4,000 more bomb-handling robots could be headed to Iraq and Afghanistan in a new, unmanned surge. It's part of a $400 million deal that's the biggest military contract of its kind,...]]></description>
      <content:encoded><![CDATA[Up to 4,000 more bomb-handling robots could be headed to Iraq and Afghanistan in a new, unmanned surge. It's part of a $400 million deal that's the biggest military contract of its kind, ever.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=fac8a5554e1e16a70e287d6b0bb7e4c2" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=fac8a5554e1e16a70e287d6b0bb7e4c2" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=Aeek0H"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=Aeek0H" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=BDJquh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=BDJquh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=9aTC3h"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=9aTC3h" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=N4XxxH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=N4XxxH" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=ECUjsH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=ECUjsH" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=mBam3h"><img src="http://feeds.wired.com/~f/wired/politics/security?i=mBam3h" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=Tn6R5h"><img src="http://feeds.wired.com/~f/wired/politics/security?i=Tn6R5h" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=kFIqDH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=kFIqDH" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/300827446" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/300827448" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 29 May 2008 18:05:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/military contract">military contract</category>
      <category domain="http://securityratty.com/tag/surge">surge</category>
      <category domain="http://securityratty.com/tag/million deal">million deal</category>
      <category domain="http://securityratty.com/tag/iraq">iraq</category>
      <category domain="http://securityratty.com/tag/afghanistan">afghanistan</category>
      <category domain="http://securityratty.com/tag/robots">robots</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/300827448/in-december-aft.html">Military Recruits Thousands More Warbots for New Unmanned Surge</source>
    </item>
    <item>
      <title><![CDATA[Al Qaeda Threat Overrated]]></title>
      <link>http://securityratty.com/article/a2cca8f3de5ba8d12843762c784be853</link>
      <guid>http://securityratty.com/article/a2cca8f3de5ba8d12843762c784be853</guid>
      <description><![CDATA[Seems obvious to me: &quot;I reject the notion that Al Qaeda is waiting for 'the big one' or holding back an attack,&quot; Sheehan writes. &quot;A terrorist cell capable of attacking doesn't sit and wait for some...]]></description>
      <content:encoded><![CDATA[<p>Seems <a href="http://www.newsweek.com/id/135654/">obvious</a> to me:</p>

<blockquote>"I reject the notion that Al Qaeda is waiting for 'the big one' or holding back an attack," Sheehan writes. "A terrorist cell capable of attacking doesn't sit and wait for some more opportune moment. It's not their style, nor is it in the best interest of their operational security. Delaying an attack gives law enforcement more time to detect a plot or penetrate the organization."

<p>Terrorism is not about standing armies, mass movements, riots in the streets or even palace coups. It's about tiny groups that want to make a big bang. So you keep tracking cells and potential cells, and when you find them you destroy them. After Spanish police cornered leading members of the group that attacked trains in Madrid in 2004, they blew themselves up. The threat in Spain declined dramatically.</p>

<p>Indonesia is another case Sheehan and I talked about. Several high-profile associates of bin Laden were nailed there in the two years after 9/11, then sent off to secret CIA prisons for interrogation. The suspects are now at Guantánamo. But suicide bombings continued until police using forensic evidence—pieces of car bombs and pieces of the suicide bombers—tracked down Dr. Azahari bin Husin, "the Demolition Man," and the little group around him. In a November 2005 shootout the cops killed Dr. Azahari and crushed his cell. After that such attacks in Indonesia stopped.</p>

<p>The drive to obliterate the remaining hives of Al Qaeda training activity along the Afghanistan-Pakistan frontier and those that developed in some corners of Iraq after the U.S. invasion in 2003 needs to continue, says Sheehan. It's especially important to keep wanna-be jihadists in the West from joining with more experienced fighters who can give them hands-on weapons and explosives training. When left to their own devices, as it were, most homegrown terrorists can't cut it. For example, on July 7, 2005, four bombers blew themselves up on public transport in London, killing 56 people. Two of those bombers had trained in Pakistan. Another cell tried to do the same thing two weeks later, but its members had less foreign training, or none. All the bombs were duds.</p>

<p>[...]</p>

<p>Sir David Omand, who used to head Britain's version of the National Security Agency and oversaw its entire intelligence establishment from the Cabinet Office earlier this decade, described terrorism as "one corner" of the global security threat posed by weapons proliferation and political instability. That in turn is only one of three major dangers facing the world over the next few years. The others are the deteriorating environment and a meltdown of the global economy. Putting terrorism in perspective, said Sir David, "leads naturally to a risk management approach, which is very different from what we've heard from Washington these last few years, which is to 'eliminate the threat'."</p>

<p>Yet when I asked the panelists at the forum if Al Qaeda has been overrated, suggesting as Sheehan does that most of its recruits are bunglers, all shook their heads. Nobody wants to say such a thing on the record, in case there's another attack tomorrow and their remarks get quoted back to them.</p>

<p>That's part of what makes Sheehan so refreshing. He knows there's a big risk that he'll be misinterpreted; he'll be called soft on terror by ass-covering bureaucrats, breathless reporters and fear-peddling politicians. And yet he charges ahead. He expects another attack sometime, somewhere. He hopes it won't be made to seem more apocalyptic than it is. "Don't overhype it, because that's what Al Qaeda wants you to do. Terrorism is about psychology." In the meantime, said Sheehan, finishing his fruit juice, "the relentless 24/7 job for people like me is to find and crush those guys."</blockquote></p>

<p>I've ordered Sheehan's book, <a href="http://www.amazon.com/Crush-Cell-Terrorism-Terrorizing-Ourselves/dp/0307382176/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1210107615&sr=8-1"><i>Crush the Cell: How to Defeat Terrorism Without Terrorizing Ourselves</i></a>.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=HeAtlH"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=HeAtlH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=B3npqH"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=B3npqH" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 07 May 2008 08:56:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sheehan">sheehan</category>
      <category domain="http://securityratty.com/tag/sheehan writes">sheehan writes</category>
      <category domain="http://securityratty.com/tag/qaeda">qaeda</category>
      <category domain="http://securityratty.com/tag/terrorist cell capable">terrorist cell capable</category>
      <category domain="http://securityratty.com/tag/terrorism">terrorism</category>
      <category domain="http://securityratty.com/tag/cell">cell</category>
      <category domain="http://securityratty.com/tag/defeat terrorism">defeat terrorism</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/attack tomorrow">attack tomorrow</category>
      <source url="http://www.schneier.com/blog/archives/2008/05/al_qaeda_threat.html">Al Qaeda Threat Overrated</source>
    </item>
    <item>
      <title><![CDATA[U.S. Spies Use Custom Videogames to Learn How to Think]]></title>
      <link>http://securityratty.com/article/52a7900eb93734e3ce719ec66463ef76</link>
      <guid>http://securityratty.com/article/52a7900eb93734e3ce719ec66463ef76</guid>
      <description><![CDATA[The U.S. Defense Intelligence Agency commissions three custom games to teach new recruits critical thinking skills, while the Army builds its own simulator to instruct intelligence officers in the art...]]></description>
      <content:encoded><![CDATA[The U.S. Defense Intelligence Agency commissions three custom games to teach new recruits critical thinking skills, while the Army builds its own simulator to instruct intelligence officers in the art of interrogation. No virtual waterboarding allowed.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=9dea106be03b195221d70fb70518c82b" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=9dea106be03b195221d70fb70518c82b" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=WFx1DEG"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=WFx1DEG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=CQl5geg"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=CQl5geg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=tqk0uwg"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=tqk0uwg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=0qwvmmG"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=0qwvmmG" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=worz9NG"><img src="http://feeds.wired.com/~f/wired/politics/security?i=worz9NG" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=mNZ7fAg"><img src="http://feeds.wired.com/~f/wired/politics/security?i=mNZ7fAg" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=sOf3bIg"><img src="http://feeds.wired.com/~f/wired/politics/security?i=sOf3bIg" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=ReBVo0G"><img src="http://feeds.wired.com/~f/wired/politics/security?i=ReBVo0G" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/276613840" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/276613861" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 23 Apr 2008 23:30:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/instruct intelligence officers">instruct intelligence officers</category>
      <category domain="http://securityratty.com/tag/army builds">army builds</category>
      <category domain="http://securityratty.com/tag/custom games">custom games</category>
      <category domain="http://securityratty.com/tag/recruits critical">recruits critical</category>
      <category domain="http://securityratty.com/tag/art">art</category>
      <category domain="http://securityratty.com/tag/skills">skills</category>
      <category domain="http://securityratty.com/tag/simulator">simulator</category>
      <category domain="http://securityratty.com/tag/interrogation">interrogation</category>
      <category domain="http://securityratty.com/tag/virtual">virtual</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/276613861/spy_games">U.S. Spies Use Custom Videogames to Learn How to Think</source>
    </item>
    <item>
      <title><![CDATA[New Air Force Recruitment Campaign Touts Fledgling 'Cyber Command']]></title>
      <link>http://securityratty.com/article/233bc333026390c3e7c89e1db060a2e9</link>
      <guid>http://securityratty.com/article/233bc333026390c3e7c89e1db060a2e9</guid>
      <description><![CDATA[A 30-second TV spot aims to excite would-be recruits by showing Air Force cyber warriors handily defeating a hacker targeting the...]]></description>
      <content:encoded><![CDATA[A 30-second TV spot aims to excite would-be recruits by showing Air Force cyber warriors handily defeating a hacker targeting the Pentagon.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=a61db7dae15fdec99f7ca5d580575e70" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=a61db7dae15fdec99f7ca5d580575e70" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=i0EM9YE"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=i0EM9YE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=Wm9rVme"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=Wm9rVme" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=MNDqBse"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=MNDqBse" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=ZdEq4tE"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=ZdEq4tE" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=XvLrmNE"><img src="http://feeds.wired.com/~f/wired/politics/security?i=XvLrmNE" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=4omnb0e"><img src="http://feeds.wired.com/~f/wired/politics/security?i=4omnb0e" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=KDzSMRe"><img src="http://feeds.wired.com/~f/wired/politics/security?i=KDzSMRe" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=6VypbQE"><img src="http://feeds.wired.com/~f/wired/politics/security?i=6VypbQE" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/242415153" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/242415167" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 27 Feb 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/excite would-be recruits">excite would-be recruits</category>
      <category domain="http://securityratty.com/tag/pentagon">pentagon</category>
      <category domain="http://securityratty.com/tag/hacker">hacker</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/242415167/click.phdo">New Air Force Recruitment Campaign Touts Fledgling 'Cyber Command'</source>
    </item>
    <item>
      <title><![CDATA[Stolen UK Ministry of Defence laptop affects up to 600,000]]></title>
      <link>http://securityratty.com/article/167a0e549bb30d18050fe49128a0bb1b</link>
      <guid>http://securityratty.com/article/167a0e549bb30d18050fe49128a0bb1b</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
1/18/08

Organization
The United Kingdom of Great Britain and Northern Ireland (UK

Contractor/Consultant/Branch
Ministry of Defence (MoD

Victims
people...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/mod.jpg" align="right" height="49" width="176">
<font size="2"><span style="font-weight: bold;">Date Reported: </span><br>1/18/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.direct.gov.uk/en/index.htm" target="_blank"> The United Kingdom of Great Britain and Northern Ireland (UK)</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br><a href="http://www.mod.uk/defenceinternet/home" target="_blank"> Ministry of Defence (MoD)</a> <br><br><span style="font-weight: bold;">Victims:</span><br>"people who have either expressed an interest in, or have joined, the Royal Navy, Royal Marines and the Royal Air Force"<br><br><span style="font-weight: bold;">Number Affected:</span><br>600,000<br><br><span style="font-weight: bold;">Types of Data:</span><br>Names, addresses, telephone numbers, passport details, National Insurance numbers, drivers’ license details, family details, doctors’ addresses, National Health Service numbers, and banking details*<br><br><font size="1">*Some records contained nothing more than a name, and others contained all of the information noted above.&nbsp; The information collected was dependent upon how far a military candidate went in the enlistment process.</font><br><br><span style="font-weight: bold;">Breach Description:</span><br>A laptop computer was stolen from the car of an officer of the UK Royal Navy.&nbsp; The laptop was not encrypted and contained sensitive personal information belonging to new and potential recruits to the Royal Marines, the Royal Navy and the Royal Air Force.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.mod.uk/DefenceInternet/DefenceNews/DefencePolicyAndBusiness/ModConfirmsLossOfRecruitmentData.htm" target="_blank"> The UK Ministry of Defence News Release</a> <br><a href="http://www.timesonline.co.uk/tol/news/politics/article3215887.ece" target="_blank"> The Sunday Times Story online</a> <br><a href="http://www.pcworld.com/article/id,141565-c,privacy/article.html" target="_blank"> PC World Story</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>UK Ministry of Defence ("MoD")<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>The Ministry of Defence can confirm that a laptop was stolen from a Royal Navy officer in Birmingham last week, on the night of 9/10 January, and as a result, a large quantity of personal data has been lost.<br><br>The Royal Navy careers officer who lost the data is believed to have worked at a recruiting office in Birmingham. He is expected to be court-martialled.<br><span style="font-style: italic;">[Evan] I believe that the person responsible should be held accountable, but I question whether or not this officer is ultimately responsible.&nbsp; Did the actions that led to this breach go against standard procedure?&nbsp; What is the standard procedure?&nbsp; Was the officer properly trained on standard procedure?&nbsp; Unfortunately, I am not optimistic that court-martialling this officer will do much to protect against future breaches.&nbsp; More is needed.</span><br style="font-style: italic;"><br style="font-style: italic;">After consultation with West Midlands Police about the impact on the investigation were the theft to become public knowledge, we did not immediately make public the loss of this data. In view of today’s media reports, we have, however, decided that it would now be right to do so.<br><br>Although the theft of the laptop that contained the unencrypted data was reported to the police immediately, they said it was only “later” that they were told what was on it.<br><span style="font-style: italic;">[Evan] Maybe the MoD didn't know what was on it.&nbsp; The fact that a laptop is used to access, create and/or store confidential data without encryption is inexcusable.&nbsp; This points to a bigger issue.</span><br style="font-style: italic;"><br>“I don't think they know what was on this", Liam Fox, shadow defence secretary<br><br>“There are a very large number of questions that will have to answered on Monday. This is either catastrophically lax procedure or this individual is very irresponsible.”, Liam Fox<br><span style="font-style: italic;">[Evan] My vote is lax procedure and poor practice.</span><br style="font-style: italic;"><br>The stolen laptop contained personal information relating to some 600,000 people who have either expressed an interest in, or have joined, the Royal Navy, Royal Marines and the Royal Air Force.<br><br>The information held is not the same for every individual. In some cases, for casual enquiries, the record is no more than a name. But, for those who progressed as far as submitting an application to join the Forces, extensive personal data may be held, including passport details, National Insurance numbers, drivers’ licence details, family details, doctors’ addresses and National Health Service numbers.<br><br>The computer did not have anything other than basic security systems, but once the thief had accessed the computer the data itself could be easily read.<br><br>The Ministry of Defence is treating the loss of this data with the utmost seriousness.<br><br>We are writing to some 3,500 people whose bank details were included on the database.<br><br>Action has already been taken with the assistance of APACS [Association for Payment Clearing Services] to inform the relevant banks so that the relevant accounts can be flagged for scrutiny against unauthorised access. <br><br>The Secretary of State will make a statement to Parliament at the earliest opportunity.<br><br>Information Commissioner Richard Thomas said he would be demanding answers from the MoD over the loss of the data and why it was unencrypted.<br><br>"We will require satisfactory answers from the MoD about their data protection practices and a firm assurance that steps have been taken to improve these practices before deciding on the appropriate action to take," Richard Thomas<br><br>Douglas Young, of the British Armed Forces Federation, said there had to be a “top level investigation” into the whole affair. "It really is very, very worrying and I'm deeply concerned to hear this.”<br><br>“This incident once again highlights the need for organisations to think long and hard about the data they allow employees to take off site on laptops and mobile devices,” Philip Wicks, Morse security consultancy<br><span style="font-style: italic;">[Evan] Yep.&nbsp; I have a dream that someday organizations will wake up and get it.</span><br style="font-style: italic;"><br>“The MOD should definitely have policies and procedures in place that dictates what information can and can’t be taken off the premises. At a minimum they should make sure that personal and sensitive data on laptops is always encrypted.”, Philip Wicks<br><span style="font-style: italic;">[Evan] Amen Philip.</span><br style="font-style: italic;"><br>Advice can be sought by emailing recruitdata@check.mod.uk <br><br>We have also established a helpline for individuals to seek further advice. The number is 0800 0853600. This number will be open between 1000hrs and 1700hrs today (Saturday 19 January 2008), 0800hrs to 1700hrs on Sunday 20 January and 0700hrs to 1900hrs between Monday and Friday.<br><br><span style="font-weight: bold;">Reader Comments:</span><br><br>"The person in question should not be fired. He or she should be JAILED for life. Now that's what would make a great example and deter these funny civil servants from playing with fire.", Kate McCluskey UK<br><span style="font-style: italic;">[Evan] People are getting fed up, and are saying enough is enough.</span><br style="font-style: italic;"><br>"Unfortunately, what all these data-loss incidents show is a completely cavalier attitude to data protection. <br><br>This is probably only the tip of the iceberg, as this latest case was leaked into the public domain, and would have been covered up otherwise. <br><br>That the Government should be trying to con us into placing all out vital information onto a central database, linked to an id card, doesn't bear thinking about. ", Daniel Fernandez, UK<br><br><span style="font-weight: bold;">Commentary:</span><br>A common theme in the news stories that I have read point the blame on the Navy officer.&nbsp; I don't doubt that he has some blame in this case, but I think the issue is much larger.&nbsp; There is very little mention about what MoD's policy and procedure is with regards to confidential personal information.&nbsp; If the Navy officer was following procedure or wasn't aware of the procedure, then the issues are much larger in scope and more difficult to address.<br><br>The MoD would benefit from encrypting all mobile devices whether they are used for confidential data storage or not. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/01/20/mod.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Sun, 20 Jan 2008 11:51:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/confidential personal information">confidential personal information</category>
      <category domain="http://securityratty.com/tag/personal information">personal information</category>
      <category domain="http://securityratty.com/tag/sensitive personal information">sensitive personal information</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/extensive personal data">extensive personal data</category>
      <category domain="http://securityratty.com/tag/personal data">personal data</category>
      <category domain="http://securityratty.com/tag/personal">personal</category>
      <category domain="http://securityratty.com/tag/information held">information held</category>
      <category domain="http://securityratty.com/tag/data protection practices">data protection practices</category>
      <source url="http://breachblog.com/2008/01/20/mod.aspx">Stolen UK Ministry of Defence laptop affects up to 600,000</source>
    </item>
  </channel>
</rss>
