<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: reporter]]></title>
    <link>http://securityratty.com/tag/reporter</link>
    <description></description>
    <pubDate>Fri, 08 Aug 2008 09:10:15 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Reporter's notebook: Excitement, fear on the e-vote trail]]></title>
      <link>http://securityratty.com/article/17c90acc9167c12f726acbad9d1c690b</link>
      <guid>http://securityratty.com/article/17c90acc9167c12f726acbad9d1c690b</guid>
      <description><![CDATA[No one's doubting the outcome of the massive turnout in the U.S. presidential election in Democratic New Jersey, but for some voters and elected officials, e-voting glitches and long lines are...]]></description>
      <content:encoded><![CDATA[No one's doubting the outcome of the massive turnout in the U.S. presidential election in Democratic New Jersey, but for some voters and elected officials, e-voting glitches and long lines are undermining confidence in the electoral process.]]></content:encoded>
      <pubDate>Mon, 03 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/electoral process">electoral process</category>
      <category domain="http://securityratty.com/tag/massive turnout">massive turnout</category>
      <category domain="http://securityratty.com/tag/presidential election">presidential election</category>
      <category domain="http://securityratty.com/tag/officials">officials</category>
      <category domain="http://securityratty.com/tag/democratic">democratic</category>
      <category domain="http://securityratty.com/tag/lines">lines</category>
      <category domain="http://securityratty.com/tag/voters">voters</category>
      <category domain="http://securityratty.com/tag/outcome">outcome</category>
      <category domain="http://securityratty.com/tag/glitches">glitches</category>
      <source url="http://www.networkworld.com/news/2008/110408-reporters-notebook-excitement-fear-on.html?fsrc=rss-security">Reporter's notebook: Excitement, fear on the e-vote trail</source>
    </item>
    <item>
      <title><![CDATA[You may not even know it, but a Bodyguard may be protecting your colleague as you work.]]></title>
      <link>http://securityratty.com/article/b854f696580e858bbb700b07fed3a181</link>
      <guid>http://securityratty.com/article/b854f696580e858bbb700b07fed3a181</guid>
      <description><![CDATA[I just came across an excellent workplace violence article written by Seattlepi.com reporter, Andrea James

The article raises many points that I am sure many of us have or would overlook if it was...]]></description>
      <content:encoded><![CDATA[I just came across an excellent workplace violence article written by <a href="http://seattlepi.nwsource.com/business/384364_domesticviolence22.html">Seattlepi.com reporter, Andrea James.</a><br /><span id="fullpost"><br />The article raises many points that I am sure many of us have or would overlook if it was not brought to our attention.  The director of New Beginnings, a Seattle based non-profit that provides advocacy and shelter for victims made the point that while going home after a hard day's work is something that many employees look forward to, for victims of domestic abuse, work is the only place that provides them safety and a sanctuary from a tortured home life.<br /><br /></span><br />Our company is frequently requested by employers to provide covert bodyguards for employees with domestic problems at home.  The reason for this is due to the fact that physical violence at home, quite often spills into the workplace by the abuser and when that happens, the liklihood of the domestic partner and other co-workers getting hurt or even killed is very real.<br /><br />Employers know that they have a responsibility to keep the workplace safe so they hire companies like ours to have trained personal protection specialists blend in at the place of empoyment and watch out for the identified threat.  Just about 100% of the time the victim of the abuse is a female employee but this article and the comments that follow show that males also suffer from domestic violence.  <br /><br />It is the opinion of our company that we will see even more workplace violence, domestic and otherwise, as companies continue to practice cost cutting tactics like downsizing and layoffs due to the worsening economy.  Other related predictions would be thefts from the workplace, increase in fraud and embezzlement, an increase in Resume/CV fabrications as more and more people compete for fewer jobs.<br /><br />This all goes to show that employers have to be more astute and procative in making sound hiring decisions, being alert for internal theft and abuse and being proactive when it comes to workplace violence.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 26 Oct 2008 09:33:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/workplace safe">workplace safe</category>
      <category domain="http://securityratty.com/tag/workplace">workplace</category>
      <category domain="http://securityratty.com/tag/domestic">domestic</category>
      <category domain="http://securityratty.com/tag/domestic violence">domestic violence</category>
      <category domain="http://securityratty.com/tag/workplace violence">workplace violence</category>
      <category domain="http://securityratty.com/tag/domestic partner">domestic partner</category>
      <category domain="http://securityratty.com/tag/home life">home life</category>
      <category domain="http://securityratty.com/tag/home">home</category>
      <category domain="http://securityratty.com/tag/provide covert bodyguards">provide covert bodyguards</category>
      <source url="http://www.thebulletproofblog.com/2008/10/you-may-not-even-know-it-but-bodyguard.html">You may not even know it, but a Bodyguard may be protecting your colleague as you work.</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Share Cell Connections over Wi-Fi; Mile High-Fi Salaciousness; Giga-Fi; and More]]></title>
      <link>http://securityratty.com/article/457365225a8b72096232f2b375549cff</link>
      <guid>http://securityratty.com/article/457365225a8b72096232f2b375549cff</guid>
      <description><![CDATA[New version of Windows Mobile software to share cell data connections over Wi-Fi: Morose Media ships version 1.20 of WMWifiRouter, a Windows Mobile 5 and 6 application that routes cellular data...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.wmwifirouter.com/"><strong>New version of Windows Mobile software to share cell data connections over Wi-Fi:</strong></a> Morose Media ships version 1.20 of WMWifiRouter, a Windows Mobile 5 and 6 application that routes cellular data connections over Wi-Fi, turning your phone into a micro-hotspot. The software can also share a cell connection via Bluetooth or USB. The software costs $30 or &euro;20, and requires Internet (Connection) Sharing (ICS), which some providers may have removed from your phone. (The company set the price at US$30 before the euro drop, so is offering a kind of discount over their real &euro;20 price for the moment.)</p>

<p><a href="http://www.nytimes.com/2008/09/11/technology/personaltech/11smart.html?_r=1&8cir&emc=cirb1&oref=slogin"><strong>The New York Times rounds up using cell phones as hotspots:</strong></a> Though the reporter, Bob Tedeschi, mentions the issue of having to have an unlimited data plan to avoid unpleasant charges, and worries about bad drains and malicious users, he doesn't note that many carriers don't allow this kind of sharing or routing without a separate "tethering" plan, that can run $20 or more per month. Also, U.S. carriers have now all imposed a 5 GB per month reasonable use cap; some will cut you off, some charge you more, some cancel your service based on exceeding this use.</p>

<p><a href="http://www.networkworld.com/news/2008/090908-ieee-considers-gigabit.html?hpg1=bn"><strong>Gigabit Wi-Fi? Someday:</strong></a> TechWorld considers the IEEE's Very High Throughput (VHT) study group, which wants to start work on 1 Gbps or faster Wi-Fi standard for completion in 2012. With 802.11n offering raw symbol rates up to 600 Mbps--even though no devices have shipped with the radios and antennas to offer that optional high speed yet--there's interest in other frequencies that would allow faster encodings, as well as aggregating multiple links to achieve high speed rates. My experience in testing and using 2.4 GHz with Draft N would show that wide or aggregated channels doesn't work very well. The article's writer, Peter Judge, notes that ultrawideband had potential (over short distances) to approach the gigabit mark, but that UWB hasn't really reached the market in any substantive way years after it was promised to be a big technology.</p>

<p><a href="http://www.nbc5i.com/news/17435300/detail.html"><strong>Flight attendants express concerns about in-flight broadband porn:</strong></a> When I've spoken to airlines, industry experts, and service providers, I find that they all have stories about how porn is viewed on computers, through DVD players, and in convenient magazine form on planes today. Adding the Internet may provide new salacious imagery, but the problem predates Internet access, and filtering Internet service is never as good a solution as a social one. Someone idiotic enough to view porn on a plane over the Internet is also stupid enough to bring along inappropriate DVDs they watch while seated next to children. Flight attendants already have the power vested in them to take care of this. The flight attendants for American might be expressing this concern as part of a bargaining issue, where their responsibilities but not commensurate pay have increased.</p>

<p><a href="http://www.kxly.com/Global/story.asp?S=8989329"><strong>Spokane ends free Wi-Fi:</strong></a> Remember Vivato? Boy, I sure do. A company with a reach far exceeding its grasp, Vivato initially powered Spokane's downtown network. The network has continued to run on some basis--I'm not sure using what equipment--and now will move from free to fee. OneEighty Networks will charge about $10 per month to cover the costs of the network, for which local businesses at one point chipped in.</p>

<p><a href="http://www.onair.aero/"><strong>Brazilian TAM airline signs up for in-flight calling, messaging:</strong></a> OnAir has signed up the Brazilian carrier TAM, which will deploy the service on its Airbus A320 craft. Brazil hasn't yet provided regulatory approval, so no launch date is noted. TAM is the largest domestic and international carrier for Brazil.</p>]]></content:encoded>
      <pubDate>Thu, 11 Sep 2008 07:02:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/internet service">internet service</category>
      <category domain="http://securityratty.com/tag/faster wi-fi standard">faster wi-fi standard</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/internet access">internet access</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/software costs">software costs</category>
      <category domain="http://securityratty.com/tag/free wi-fi">free wi-fi</category>
      <source url="http://wifinetnews.com/archives/008436.html">Wee-Fi: Share Cell Connections over Wi-Fi; Mile High-Fi Salaciousness; Giga-Fi; and More</source>
    </item>
    <item>
      <title><![CDATA[Secret Military Technology]]></title>
      <link>http://securityratty.com/article/ae8517ec5993912e6996ae981acd5cc7</link>
      <guid>http://securityratty.com/article/ae8517ec5993912e6996ae981acd5cc7</guid>
      <description><![CDATA[On 60 Minutes , in an interview with Scott Pelley, reporter Bob Woodward claimed that the U.S. military has a new secret technique that's so revolutionary, it's on par with the tank and the airplane:...]]></description>
      <content:encoded><![CDATA[<p>On <i>60 Minutes</i>, in an interview with Scott Pelley, reporter Bob Woodward claimed that the U.S. military has a new secret technique that's so revolutionary, it's on par with the tank and the airplane:</p>

<blockquote>Woodward: This is very sensitive and very top secret, but there are secret operational capabilities that have been developed by the military to locate, target, and kill leaders of al Qaeda in Iraq, insurgent leaders, renegade militia leaders, that is one of the true breakthroughs.

<p>Pelley: What are we talking about here? Some kind of surveillance, some kind of targeted way of taking out just the people that you're looking for, the leadership of the enemy?<br />
 <br />
[...]</p>

<p>Woodward: It is the stuff of which military novels are written.</p>

<p>Pelley: Do you mean to say that this special capability is such an advance in military technique and technology that it reminds you of the advent of the tank and the airplane?</p>

<p>Woodward: Yeah.</blockquote></p>

<p>It's <a href="http://www.cbsnews.com/stories/2008/09/04/60minutes/main4415771.shtml">here</a>, 7 minutes and 55 seconds in.</p>

<p>Anyone have any ideas?</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=1ALNL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=1ALNL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=DDhiL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=DDhiL" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 10 Sep 2008 07:35:28 +0000</pubDate>
      <category domain="http://securityratty.com/tag/military">military</category>
      <category domain="http://securityratty.com/tag/woodward">woodward</category>
      <category domain="http://securityratty.com/tag/reporter bob woodward">reporter bob woodward</category>
      <category domain="http://securityratty.com/tag/military novels">military novels</category>
      <category domain="http://securityratty.com/tag/scott pelley">scott pelley</category>
      <category domain="http://securityratty.com/tag/pelley">pelley</category>
      <category domain="http://securityratty.com/tag/military technique">military technique</category>
      <category domain="http://securityratty.com/tag/renegade militia leaders">renegade militia leaders</category>
      <category domain="http://securityratty.com/tag/secret operational capabilities">secret operational capabilities</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/secret_military.html">Secret Military Technology</source>
    </item>
    <item>
      <title><![CDATA[Premature Update on Philadelphia Wi-Fi]]></title>
      <link>http://securityratty.com/article/95922e41bb691a60a525baab81a41942</link>
      <guid>http://securityratty.com/article/95922e41bb691a60a525baab81a41942</guid>
      <description><![CDATA[I'm not sure why this article was written, as there appears to be nothing particularly newsworthy in it: The News.com reporter Marguerite Reardon has covered muni-Fi for as long as I have, and after...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://news.cnet.com/8301-1035_3-10033386-94.html"><strong>I'm not sure why this article was written, as there appears to be nothing particularly newsworthy in it:</strong></a> The News.com reporter Marguerite Reardon has covered muni-Fi for as long as I have, and after reading this in-depth piece, I'm left wondering whether it was assigned far too early, and she was meeting an editorial desk requirement instead of feeling like the story was ready to "print." The article looks at Network Acquisition Corp. (NAC), the allegedly interim name for the group that's taken over Phila-Fi. </p>

<p>One source at the Knight Center for Digital Excellence notes, "The new network owners are supposed to have a much more sustainable business model." <em>Supposed to.</em> Later, "Network Acquisition Company, which acquired the network, hasn't talked publicly about the details of its new plan, but it has hinted that its strategy will differ from EarthLink's." <em>Hasn't talked publicly.</em> Then, "[NAC and Tropos] spokespeople said the companies would talk more about the network later this month when details of the new business plan are ready." Huh.</p>

<p>Reardon explains digital divide issues and looks into what Wireless Philadelphia has been up to, although doesn't note that delays in EarthLink's deployment and other factors have led to just a few hundred individuals that have been assisted by the non-profit; numbers may have changed, but that was as of a few months ago. Still, Wireless Philadelphia has apparently diversified its funding sources--Reardon cites 30 now.</p>

<p>I think we're still coming off the doldrums of August.</p>]]></content:encoded>
      <pubDate>Fri, 05 Sep 2008 09:23:51 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/network acquisition company">network acquisition company</category>
      <category domain="http://securityratty.com/tag/network acquisition corp">network acquisition corp</category>
      <category domain="http://securityratty.com/tag/network owners">network owners</category>
      <category domain="http://securityratty.com/tag/wireless philadelphia">wireless philadelphia</category>
      <category domain="http://securityratty.com/tag/sustainable business model">sustainable business model</category>
      <category domain="http://securityratty.com/tag/editorial desk requirement">editorial desk requirement</category>
      <category domain="http://securityratty.com/tag/plan">plan</category>
      <category domain="http://securityratty.com/tag/digital excellence notes">digital excellence notes</category>
      <source url="http://wifinetnews.com/archives/008431.html">Premature Update on Philadelphia Wi-Fi</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Houston-Fi, ASCII WPA Passphrases, Green Wi-Fi]]></title>
      <link>http://securityratty.com/article/7f30d96346f66d41619e4abd9bae8e7d</link>
      <guid>http://securityratty.com/article/7f30d96346f66d41619e4abd9bae8e7d</guid>
      <description><![CDATA[Houston flips switch on free downtown Wi-Fi: Dwight Silverman of the Houston Chronicle accidentally discovers the soft launch of the network funded by EarthLink's $5m default fee. (The fee was paid...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://blogs.chron.com/techblog/archives/2008/08/it_lives_city_of_houston_turns_on_free_downto.html"><strong>Houston flips switch on free downtown Wi-Fi:</strong></a> Dwight Silverman of the Houston Chronicle accidentally discovers the soft launch of the network funded by EarthLink's $5m default fee. (The fee was paid when they missed a milestone, and the firm later walked away.) The downtown area now has a limited pilot project that's free; the real effort in Houston is supposed to be at 10 housing projects and in parks where service would be used to bridge the digital divide and improve the quality of life. How, exactly, is part of what's being tested.</p>

<p><a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/08/18/MNH312BTS1.DTL&hw=wi+fi&sn=004&sc=589"><strong>That's ASCII, not hex:</strong></a> An article on wardriving raises security hackles by repeating some slightly overheated statements about Wi-Fi security. The article opens with a 63-character ASCII WPA passphrase, which is later described as "hex." (ASCII passphrases in WPA can be up to 63 "printable" characters - ASCII 32 to 127 - while a hex version of a 256-bit TKIP or AES password is 64 hexadecimal digits long.) The article tries to conflate Wi-Fi attacks that led to the largest set of breaches in retail credit-card systems and wardriving, a hobbyist activity that's never been looked on very favorably by law enforcement. The sense of ennui of wardriving pioneers is pretty clear; when Wi-Fi is everywhere and generally secured, it's far less interesting. The wardriver in the article convinced the reporter that a maximum-length WPA passphrase stored on a USB drive for automatic use was the best way to go. But, really, 20 characters containing letters and punctuation and no words found in a dictionary along with changing your network's SSID (network name) provides all the security you'll ever need for a home or small business. (If you need more, deploy WPA/WPA2 Personal.)</p>

<p><a href="http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2008/08/16/BUA712BH1O.DTL&hw=wi+fi&sn=001&sc=1000"><strong>Green Wi-Fi's Senegal efforts hit snags:</strong></a> The folks at Green Wi-Fi are well motivated, and they're running up against all forms of security theater and bureaucracy both here and in Senegal, where they have an active project. The San Francisco Chronicle notes the group's effort to build solar-powered, self-sustaining Internet access via mesh networked nodes. Getting devices out of the country, clearing customs in Senegal, and hooking up their solar system all hit problems they're working through. As with the One Laptop Per Child program, I see a "build it and they will come" mentality in <a href="http://www.green-wifi.org/"><strong>Green Wi-Fi's mission statement</strong></a>: the notion that providing computing power and Internet access will result in good things, rather than an effort to figure out what good things need to be achieved, and whether computers and the Internet will assist. </p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 06:26:25 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi attacks">wi-fi attacks</category>
      <category domain="http://securityratty.com/tag/houston">houston</category>
      <category domain="http://securityratty.com/tag/wi-fi security">wi-fi security</category>
      <category domain="http://securityratty.com/tag/free downtown wi-fi">free downtown wi-fi</category>
      <category domain="http://securityratty.com/tag/free">free</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/ascii">ascii</category>
      <category domain="http://securityratty.com/tag/security theater">security theater</category>
      <source url="http://wifinetnews.com/archives/008423.html">Wee-Fi: Houston-Fi, ASCII WPA Passphrases, Green Wi-Fi</source>
    </item>
    <item>
      <title><![CDATA[Who's Behind the Georgia Cyber Attacks?]]></title>
      <link>http://securityratty.com/article/5b529a9f3815b10331813e58bacf8129</link>
      <guid>http://securityratty.com/article/5b529a9f3815b10331813e58bacf8129</guid>
      <description><![CDATA[Of course the Klingons did it, or you were naive enough to even think for a second that Russians were behind it at the first place? Of the things I hate most, it's lowering down the quality of the...]]></description>
      <content:encoded><![CDATA[<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQoGBB38zI/AAAAAAAACCU/WYu9dc61zMQ/s1600-h/georgia_ddos8.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img height="51" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQoGBB38zI/AAAAAAAACCU/1TazKONjKVw/s200-R/georgia_ddos8.JPG" style="border: 0pt none ;" width="200" /></a>Of course the Klingons did it, or you were naive enough to even think for a second that Russians were behind it at the first place? Of the things I hate&nbsp; most, it's lowering down the quality of the discussion I hate the most. Even if you're excluding all the factual evidence (<a href="http://blogs.zdnet.com/security/?p=1670">Coordinated Russia vs Georgia cyber attack in progress</a>), common sense must prevail.<br />
<br />
Sometimes, the degree of incompetence can in fact be pretty entertaining, and greatly explains why certain countries are lacking behind others with years in their inability to understand the rules of information warfare, or the basic premise of unrestricted warfare, that there are no rules on how to achieve your objectives.<br />
<br />
So who's behind the Georgia cyber attacks, encompassing of plain simple ping floods, web site defacements, to sustained DDoS attacks, which no matter the fact that Geogia has switched hosting location to the U.S remain ongoing? It's <a href="http://computerworld.com/action/article.do?command=viewArticleBasic&amp;taxonomyName=cybercrime_and_hacking&amp;articleId=9112443&amp;taxonomyId=82&amp;intsrc=kc_top">Russia's self-mobilizing cyber militia, the product of a collectivist society</a> having the capacity to wage cyber wars and literally dictating the rhythm in this space. What is militia anyway : <br />
<br />
<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQqNt95RjI/AAAAAAAACCc/hxG1PZAcltY/s1600-h/information_warfare.1.gif" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQqNt95RjI/AAAAAAAACCc/B0-V902UtRA/s200-R/information_warfare.1.gif" style="border: 0pt none ;" /></a>"<i>civilians trained as soldiers but not part of the regular army; the entire body of physically fit civilians eligible by law for military service; a military force composed of ordinary citizens to provide defense, emergency law enforcement, or paramilitary service, in times of emergency; without being paid a regular salary or committed to a fixed term of service; an army of trained civilians, which may be an official reserve army, called upon in time of need; the national police force of a country; the entire able-bodied population of a state; or a private force, not under government control; An army or paramilitary group comprised of citizens to serve in times of emergency</i>"<br />
<br />
Next to the "blame the Russian Business Network for the lack of large scale implementation of DNSSEC" mentality, certain news articles also try to wrongly imply that <a href="http://arstechnica.com/news.ars/post/20080813-georgian-attacks-might-not-be-russians-after-all.html%20">there's no Russian connection in these attacks</a>, and that the attacks are not "state-sponsored", making it look like that there should be a considerable amount of investment made into these attacks, and that the Russian government has the final word on whether or not its DDoS capabilities empowered citizens should launch any attacks or not. In reality, the only thing the Russian government was asking itself during these attacks was "why didn't they start the attacks earlier?!".<br />
<br />
Thankfully, there are some visionary folks out there understanding the situation. Last year, I asked the following question - <a href="http://www.imedialearn.com/imediapoll/poll.php?code=f1156c39d3c972139c62bc91c17e2c53">What is the most realistic scenario on what exactly happened in the recent DDoS attacks aimed at Estonia, from your point of view?</a> and some of the possible answers still fully apply in this situation :<br />
<br />
- It was a Russian government-sponsored hacktivism, or shall we say a government-tolerated one<br />
<br />
- Too much media hype over a sustained ICMP flood, given the publicly obtained statistics of the network traffic<br />
<br />
- Certain individuals of the collectivist Russian society, botnet masters for instance, were automatically recruited based on a nationalism sentiments so that they basically forwarded some of their bandwidth to key web servers<br />
<br />
- In order to generate more noise, DIY DoS tools were distributed to the masses so that no one would ever know who's really behind the attacks<br />
<br />
- Don't know who did it, but I can assure you my kid was playing !synflood at that time<br />
<br />
- Offended by the not so well coordinated removal of the Soviet statue, Russian oligarchs felt the need to send back a signal but naturally lacking any DDoS capabilities, basically outsourced the DDoS attacks<br />
<br />
- A foreign intelligence agency twisting the reality and engineering cyber warfare tensions did it, while taking advantage of the momentum and the overall public perception that noone else but the affected Russia could be behind the attacks<br />
<br />
- I hate scenario building, reminds me of my academic years, however, yours are pretty good which doesn't necessarily mean I actually care who did it, and pssst - it's not cyberwar, as in cyberwar you have two parties with virtual engagement points, in this case it was bandwidth domination by whoever did it over the other. A virtual shock and awe<br />
<br />
- I stopped following the news story by the time every reporter dubbed it the first cyber war, and started following it again when the word hacktivism started gaining popularity. So, hacktivists did it to virtually state their political preferences <br />
<br />
Departamental cyber warfare would never reach the flexibity state of people's information warfare where everyone is a cyber warrior given he's empowered with access to the right tools at a particular moment in time.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">People's Information Warfare Concept</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/combating-unrestricted-warfare.html">Combating Unrestricted Warfare</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/cyber-storm-ii-cyber-exercise.html">The Cyber Storm II Cyber Exercise</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/chinese-hacktivists-waging-peoples.html">Chinese Hacktivists Waging People's Information Warfare Against CNN</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/ddos-attack-against-cnncom.html">The DDoS Attacks Against CNN.com</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/chinas-cyber-espionage-ambitions.html">China's Cyber Espionage Ambitions</a><br />
<a href="http://ddanchev.blogspot.com/2006/07/north-koreas-cyber-warfare-unit-121.html">North Korea's Cyber Warfare Unit 121</a><br />
<div><a href="http://ddanchev.blogspot.com/2006/09/chinese-hackers-attacking-us.html">Chinese Hackers Attacking U.S Department of Defense Networks</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">Electronic Jihad's Targets List</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">Teaching Cyber Jihadists How to Hack</a></div><div><a href="http://ddanchev.blogspot.com/2007/10/empowering-script-kiddies.html">Empowering the Script Kiddies</a></div><div><a href="http://ddanchev.blogspot.com/2007/04/osint-through-botnets.html">OSINT Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2007/05/corporate-espionage-through-botnets.html">Corporate Espionage Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2008/02/malware-infected-hosts-as-stepping.html">Malware Infected Hosts as Stepping Stones</a></div><div><a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a></div><div><a href="http://ddanchev.blogspot.com/2006/05/current-emerging-and-future-state-of.html">The Current, Emerging, and Future State of Hacktivism</a></div><div><a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS - Psychological Operations</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Tcck1K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Tcck1K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=X9Eb0K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=X9Eb0K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sJIFNk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sJIFNk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=dY7m7k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=dY7m7k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=rRiYlK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=rRiYlK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=XCeTAK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=XCeTAK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=IYEN6k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=IYEN6k" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/364867192" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 14 Aug 2008 06:16:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/georgia cyber attacks">georgia cyber attacks</category>
      <category domain="http://securityratty.com/tag/warfare">warfare</category>
      <category domain="http://securityratty.com/tag/departamental cyber warfare">departamental cyber warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare tensions">cyber warfare tensions</category>
      <category domain="http://securityratty.com/tag/information warfare concept">information warfare concept</category>
      <category domain="http://securityratty.com/tag/information warfare">information warfare</category>
      <category domain="http://securityratty.com/tag/russian">russian</category>
      <category domain="http://securityratty.com/tag/russian oligarchs">russian oligarchs</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/364867192/whos-behind-georgia-cyber-attacks.html">Who's Behind the Georgia Cyber Attacks?</source>
    </item>
    <item>
      <title><![CDATA[On TV Warfare]]></title>
      <link>http://securityratty.com/article/7aa61433eb4c92c880feff4e75ceeba8</link>
      <guid>http://securityratty.com/article/7aa61433eb4c92c880feff4e75ceeba8</guid>
      <description><![CDATA[It is simply amazing that all the countries now &quot;get it&quot; that war happens primarily on TV ( this vs this ; many other examples are around). It is also amazing that there is NO way to know where &quot;media...]]></description>
      <content:encoded><![CDATA[<p>It is simply amazing that all the countries now &quot;get it&quot; that war happens primarily on TV (<a href="http://www.nytimes.com/2008/08/12/world/europe/12georgia.html?_r=1&amp;pagewanted=2&amp;bl&amp;ei=5087&amp;en=b5bf8c5e2c630491&amp;ex=1218600000&amp;oref=slogin">this</a> vs <a href="http://www.themoscowtimes.com/article/600/42/369720.htm">this</a>; many other examples are around). It is also amazing that there is NO way to know where &quot;media reporting&quot; ends and &quot;psyops&quot; begin. So, a burning tank with no clear markings that you see on TV might be:</p>  <ol>   <li>Tank belonging to warring side A</li>    <li>Tank belonging to warring side B</li>    <li>Just a tank that was passing by and got hit by mistake :-)</li>    <li>Something that looks like a burning tank</li>    <li>An archive shot that reporter added for visual impact</li> </ol>  <p>Same applies to the &quot;primary weapon&quot; of a modern TV war: &quot;evidence of atrocities of the opposing side.&quot;</p>  <p>What's the truth? Who knows... progress brought us &quot;TV wars,&quot;&#160; is this the first <a href="http://www.defensetech.org/archives/004355.html">&quot;YouTube war&quot;?</a> But if we cannot believe the media coverage, how can we believe a random video online? Well ...&#160; maybe the same way we often believe Wikipedia over Britannica.&#160; </p>  <p>In any case, if there was a better time to turn off the TV (and tune off the web news...), it would be now. Also, time to get the dust off my <a href="http://www.amazon.com/War-Anti-War-Making-Todays-Global/dp/0446602590">copy of Toffler?</a></p>  <p>Rant mode off :-)</p>  <div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=eQOSbK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=eQOSbK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=ZcEx8K"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=ZcEx8K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=a86LNK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=a86LNK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/362457461" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 13:41:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tv">tv</category>
      <category domain="http://securityratty.com/tag/tv wars">tv wars</category>
      <category domain="http://securityratty.com/tag/modern tv war">modern tv war</category>
      <category domain="http://securityratty.com/tag/war">war</category>
      <category domain="http://securityratty.com/tag/youtube war">youtube war</category>
      <category domain="http://securityratty.com/tag/tank">tank</category>
      <category domain="http://securityratty.com/tag/media coverage">media coverage</category>
      <category domain="http://securityratty.com/tag/media">media</category>
      <category domain="http://securityratty.com/tag/random video online">random video online</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/362457461/on-tv-warfare.html">On TV Warfare</source>
    </item>
    <item>
      <title><![CDATA[Journalist on Journalist Hacking at Black Hat]]></title>
      <link>http://securityratty.com/article/12204a92e0b20cb1cedf983e35a27928</link>
      <guid>http://securityratty.com/article/12204a92e0b20cb1cedf983e35a27928</guid>
      <description><![CDATA[Three French journalists have been booted for life from Black Hat and Defcon for compromising the Black Hat press room wired network and grabbing the credentials for at least one reporter. Their goal...]]></description>
      <content:encoded><![CDATA[<p>Three French journalists have been booted for life from Black Hat and Defcon for <a href="http://news.cnet.com/8301-1009_3-10010989-83.html">compromising the Black Hat press room wired network</a> and grabbing the credentials for at least one reporter.  Their goal was to publicize the risks to reporters especially current given the massive reporter presence in Bejing for the Olympics.  This risk is certainly real and it is a shame that these journalists had to compromise and embarass one of their own and potentially run afoul of US Federal wiretap laws.</p>
<p><a href="http://packetstormsecurity.org/sniffers/antisniff/"><img class="alignnone size-medium wp-image-181" title="antisniff-splash-smgif" src="http://www.veracode.com/blog/wp-content/uploads/2008/08/antisniff-splash-smgif-300x147.jpg" alt="" width="300" height="147" /></a></p>
<p>Sniffing, or monitoring all traffic on a network, is so 1999.  That is when <a href="http://www.lopht.com">L0pht</a> came out with <a href="http://windowsitpro.com/article/articleid/7258/antisniff-beta-2.html">AntiSniff</a>, which could detect many scenarios where someone was sniffing a wired network.  How can we be using plain text authentication protocols in 2008?  It is a well known and easily solved problem. But people authenticate in clear text everyday when they log into social networking or blogs or other &#8220;unimportant&#8221; applications.  The problem is when they <a href="http://news.cnet.com/8301-1009_3-9989071-83.html">use those same credentials for work or online banking</a>.</p>
<p>We need to think of any application that alows users to authenticate in the clear as broken.  If 3 journalists can monitor paaswords, anyone can.</p>
]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 09:10:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/black hat">black hat</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/black hat press">black hat press</category>
      <category domain="http://securityratty.com/tag/wired network">wired network</category>
      <category domain="http://securityratty.com/tag/journalists">journalists</category>
      <category domain="http://securityratty.com/tag/massive reporter presence">massive reporter presence</category>
      <category domain="http://securityratty.com/tag/reporter">reporter</category>
      <category domain="http://securityratty.com/tag/french journalists">french journalists</category>
      <category domain="http://securityratty.com/tag/federal wiretap laws">federal wiretap laws</category>
      <source url="http://www.veracode.com/blog/?p=179">Journalist on Journalist Hacking at Black Hat</source>
    </item>
    <item>
      <title><![CDATA[Journalist On Journalist Hacking at BlackHat]]></title>
      <link>http://securityratty.com/article/5a2aac68b4054e39e7b635a0a33d45b1</link>
      <guid>http://securityratty.com/article/5a2aac68b4054e39e7b635a0a33d45b1</guid>
      <description><![CDATA[Three French journalists have been booted for life from Black Hat and Defcon for compromising the Black Hat press room wired network and grabbing the credentials for at least one reporter. Their goal...]]></description>
      <content:encoded><![CDATA[<p>Three French journalists have been booted for life from Black Hat and Defcon for <a href="http://news.cnet.com/8301-1009_3-10010989-83.html">compromising the Black Hat press room wired network</a> and grabbing the credentials for at least one reporter.  Their goal was to publicize the risks to reporters especially current given the massive reporter presence in Bejing for the Olympics.  This risk is certainly real and it is a shame that these journalists had to compromise and embarass one of their own and potentially run afoul of US Federal wiretap laws.</p>
<p><a href="http://packetstormsecurity.org/sniffers/antisniff/"><center><img class="alignnone size-medium wp-image-181 photoborder" title="antisniff-splash-smgif" src="http://www.veracode.com/blog/wp-content/uploads/2008/08/antisniff-splash-smgif-300x147.jpg" alt="" width="300" height="147" /></center></a></p>
<p>Sniffing, or monitoring all traffic on a network, is so 1999.  That is when <a href="http://www.lopht.com">L0pht</a> came out with <a href="http://windowsitpro.com/article/articleid/7258/antisniff-beta-2.html">AntiSniff</a>, which could detect many scenarios where someone was sniffing a wired network.  How can we be using plain text authentication protocols in 2008?  It is a well known and easily solved problem. But people authenticate in clear text everyday when they log into social networking or blogs or other &#8220;unimportant&#8221; applications.  The problem is when they <a href="http://news.cnet.com/8301-1009_3-9989071-83.html">use those same credentials for work or online banking</a>.</p>
<p>We need to think of any application that alows users to authenticate in the clear as broken.  If 3 journalists can monitor passwords, anyone can.</p>
<p><strong>Update 08/08/2008 12:30pm EST:</strong></p>
<p>It turns out the attack was likely a MITM attack where the attackers ran their own DHCP server and handed out a gateway IP that was controlled by them. At least one reporter was connecting to his organization&#8217;s content management system over unencrypted HTTP and got his password compromised. More details in &#8220;<a href="http://www.eweek.com/c/a/Security/How-I-Got-Hacked-at-Black-Hat/">How eWeek Got Hacked at Black Hat</a>.&#8221;</p>
]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 09:10:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/black hat press">black hat press</category>
      <category domain="http://securityratty.com/tag/black hat">black hat</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/massive reporter presence">massive reporter presence</category>
      <category domain="http://securityratty.com/tag/reporter">reporter</category>
      <category domain="http://securityratty.com/tag/wired network">wired network</category>
      <category domain="http://securityratty.com/tag/journalists">journalists</category>
      <category domain="http://securityratty.com/tag/french journalists">french journalists</category>
      <category domain="http://securityratty.com/tag/federal wiretap laws">federal wiretap laws</category>
      <source url="http://www.veracode.com/blog/2008/08/journalist-on-journalist-hacking-at-black-hat/">Journalist On Journalist Hacking at BlackHat</source>
    </item>
  </channel>
</rss>
