<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: restaurant]]></title>
    <link>http://securityratty.com/tag/restaurant</link>
    <description></description>
    <pubDate>Tue, 12 Aug 2008 20:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Mayhem in Mumbai]]></title>
      <link>http://securityratty.com/article/b7902ee86f589ca527ebb734d591a745</link>
      <guid>http://securityratty.com/article/b7902ee86f589ca527ebb734d591a745</guid>
      <description><![CDATA[The total number of casualties rise in the financial capital of India after terrorists attack multiple locations

The latest figures suggest that at least 100 people have been killed and as many as...]]></description>
      <content:encoded><![CDATA[The total number of casualties rise in the financial capital of India after terrorists attack multiple locations.<br /><span id="fullpost"><br />The latest figures suggest that at least 100 people have been killed and as many as 900 injured.  Radio and television reporters are saying that it has all the hallmarks of an Al-Qaeda attack.  Locations included a railway station, a cinema, the Taj Hotel, and another very popular restaurant. <br /></span><br />It appears as if the terrorists singled out Westerners as they are reported to have taken British and American tourists hostages and brought them up to the 18th floor of the hotel.  This evening the hotel is on fire and the fate of the hostages is still unknown.<br /><br />The good news for some, is that they were able to escape form the hotel in the confusion.  It appears that the terrorists could have numbered dozens of heavily armed men.  This is definitely not a random attack but a well planned and executed operation aimed at causing mass casualties amnd hitting India's financial markets in much the same way as Wall Street was attacked on 9/11.<br /><br />We do not hear that much about India's terrorist problems in the West but I was made aware of it when I was invited to India to speak on Security matters this time last year.  I have since that time made clients and potenital clients aware of the  security situation.  <br /><br />There has been much outsourcing to India and many U.S. businesses are sending personnel over there as a result.  Those who can afford to have their own professional security protectors should consider that option very carefully.  It could very well turn out being more of a necessity than a luxury in these dangerous times.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Thu, 27 Nov 2008 02:48:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/india">india</category>
      <category domain="http://securityratty.com/tag/potenital clients aware">potenital clients aware</category>
      <category domain="http://securityratty.com/tag/taj hotel">taj hotel</category>
      <category domain="http://securityratty.com/tag/hotel">hotel</category>
      <category domain="http://securityratty.com/tag/clients">clients</category>
      <category domain="http://securityratty.com/tag/hostages">hostages</category>
      <category domain="http://securityratty.com/tag/mass casualties amnd">mass casualties amnd</category>
      <category domain="http://securityratty.com/tag/american tourists hostages">american tourists hostages</category>
      <category domain="http://securityratty.com/tag/aware">aware</category>
      <source url="http://www.thebulletproofblog.com/2008/11/mayhem-in-mumbai.html">Mayhem in Mumbai</source>
    </item>
    <item>
      <title><![CDATA[Celebrity's Bodyguard Caught on Camera]]></title>
      <link>http://securityratty.com/article/81cffb6766a5b98cf121e07a6e081430</link>
      <guid>http://securityratty.com/article/81cffb6766a5b98cf121e07a6e081430</guid>
      <description><![CDATA[Paparazzi seem to draw bodyguards to their cameras like moths to a light bulb

This recent grapple caught on video was aired on the Fox News show in the &quot; Kelly's Court &quot; segment. Megyn Kelly acted as...]]></description>
      <content:encoded><![CDATA[Paparazzi seem to draw bodyguards to their cameras like moths to a light bulb. <br /><span id="fullpost"><br />This recent grapple caught on video was aired on the Fox News show in the "<a href="http://www.comcast.net/data/fan/html/popup.html?v=934615342">Kelly's Court</a>" segment.  Megyn Kelly acted as the judge while two other lawyers debated whether the photographer had a chance of winning a civil suit   <br /></span><br />The celebrity, John Meyer, appeared to be exiting a restaurant with a friend when a photographer tried to take a picture.  Although the clip was relatively short, it appeared as if Mr. Meyer's E.P. agent went over the top in trying to block the photogapher from taking the picture.<br /><br />From a professional E.P. point of view, the matter could have been handled with much decorum and expertise.  Mr. Meyer should have been closely escorted to his vehicle and placed inside out of harm's way.  Since there only appeared to be one E.P. agent (who also doubled up as driver), when he went charging at the photographer, he left his Principal unprotected.<br /><br />For some reason, many of the people employed to protect celebrities seem more preoccupied with making sure that pictures are not taken rather than ensuring the safety of their Principal.  What makes it all the more ironic, is the fact that these celebrities are usually out in the public eye and therefore can not realistically expect total privacy.<br /><br />If you are a Personal Protection Specialist and you find yourself in this position, remember two things.  Firstly, always remember your duty to protect your Principal.  If you are doing it alone, who will be looking after them when you are rolling around the floor with a photographer?<br /><br />Secondly, remember that you can be sued civilly - and do not take that literally, there is nothing civil about it.  You may or may not be prosecuted criminally, but if you lose a civil suit, it could mean that you'll be spending the rest of your working life paying that photographer who is claiming neck injuires and all kinds of trauma.<br /><br />A picture may be worth a thousand words, but it is hardly worth ruining your career and life.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 23 Nov 2008 18:14:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/civil">civil</category>
      <category domain="http://securityratty.com/tag/photographer">photographer</category>
      <category domain="http://securityratty.com/tag/civil suit">civil suit</category>
      <category domain="http://securityratty.com/tag/kelly">kelly</category>
      <category domain="http://securityratty.com/tag/megyn kelly acted">megyn kelly acted</category>
      <category domain="http://securityratty.com/tag/celebrities">celebrities</category>
      <category domain="http://securityratty.com/tag/protect celebrities">protect celebrities</category>
      <category domain="http://securityratty.com/tag/meyer">meyer</category>
      <category domain="http://securityratty.com/tag/john meyer">john meyer</category>
      <source url="http://www.thebulletproofblog.com/2008/11/celebritys-bodyguard-caught-on-camera.html">Celebrity's Bodyguard Caught on Camera</source>
    </item>
    <item>
      <title><![CDATA[Phreaknic 12 (2008) Hacker Con]]></title>
      <link>http://securityratty.com/article/4f1c46cc8d2c53438d8656355e1bfa74</link>
      <guid>http://securityratty.com/article/4f1c46cc8d2c53438d8656355e1bfa74</guid>
      <description><![CDATA[New Video: Phreaknic 12 (2008) Hacker Con

This is a quick and dirty video documentary of the things that when on around the talks and event at Phreaknic 12 (2008). Don't watch if you get sick at...]]></description>
      <content:encoded><![CDATA[New Video: <a href="http://www.irongeek.com/i.php?page=videos/phreaknic-12-hacker-con">Phreaknic 12 (2008) Hacker Con</FONT></B></a>
<p></p>
<p>This is a quick and dirty video documentary of the things that when on around the talks and event at <a href="http://www.phreaknic.info">Phreaknic 12 </a>(2008). Don't watch if you get sick at shaky cam movies like Blair Witch or Cloverfield. A rough timeline of the content in the video is as follows: </p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Intro and leaving Louisville with Brian. Morgellon talks about hacking the <a href="http://dailyduino.com/">Arduino</a> micro controller platform.&nbsp;Sorteal talks about the LiVes Open Source video editor. AT&amp;T Batman building by night. Mojo-JoJo soldering some stuff for the shooting range. The patron gods of hackerdom. Registration. Con swag overview. Morgellon&nbsp; gets his discreet logic on. AK-47 building with HandGrip and Buttstock. Froggy talks up Notacon, which I plan to go to next year. Skydog explains the Jware chair toss event, and then we compete. Rootwars hacker wargames. I ask <a href="http://dualcoremusic.com/nerdcore/">Int80 about using his nerdcore</a> music in some of my videos. NotLarry explains rootwars. Some iPhone hacking with <a href="http://leebaird.com/Me/Hacking.html">Lee Baird</a> and John Skinner. I do a little <a href="http://www.irongeek.com/i.php?page=security/bluecasing1">Bluecaseing/Warnibbling </a>with the Bluetooth on my Nokia n810. John, Lee, Brian and I go to the German restaurant. I blind DOSman with the light from my camera and check out what folks are doing with the <a href="http://dailyduino.com/">Arduinos</a> Droops brought for folks to play with. I check back in on R00tW4rz. I blind Droops. I talk Ettercap filters with <a href="http://www.rmccurdy.com/">operat0r</a>. USB door key fun with the <a href="http://dailyduino.com/">Arduino</a>. More breadboard fun. Nokia n810 + Ettercap Filter + Lemon-part = win. <a href="http://dualcoremusic.com/nerdcore/">Int80</a> gets down with his own bad self, and the rest of Phreaknic. I find an energy drink with protein. Folks play with the hardware keyloggers I brought, and we have some epic fail with the IBM Model M + USB adapter + Mac OS 10.5. <a href="http://www.winnschwartau.com/">Winn Schwartau</a> joins in on the keylogger fun. <a href="http://www.packetsniffers.org/">DOSman and Zack</a> use a directional antenna from the 9th floor to search downtown Nashville for WiFi access points. Zoom in on Al. John and Lee eat jerky. <a href="http://www.hak5.org/">Daren and Shannon from Hak5</a> blind me this time. :) Then they do a quick interview. I interview <a href="http://www.digome.com/">TRiP</a> about the legalities of wardriving, sniffing and leaving your access point open so you have plausible deniability of copyright infringement (most likely it won't hold water in court if you are a computer geek). I give Hak5 Daren beef jerky. <a href="http://www.offensive-security.com/">Ziplock</a> had more con badges than God. I meet up with Iridium. I talk with Nightcarnage about the audio/video setup at Phreaknic. As I predicted, the <a href="http://www.shmoo.com/~gdead/Site/Home.html">Potters</a> won the WiFi Race. I say why this was the best Phreaknic ever. Using green lasers on crack dealers. Techno in the dark, the Aiptek action HD does not do well in low light. Nicodemius shows off his Minority Report like multi-touch table. Hula hoop contest. I check back in with Jeff Cotton and his USB keyed door. I strap on my gear to leave the con. Brian and I do a wrap up of our thoughts on Phreaknic 2008.</p>
<p><a href="http://feedads.googleadservices.com/~a/fu-jGbBXkZllK6znlRDBB8Bbjxo/a"><img src="http://feedads.googleadservices.com/~a/fu-jGbBXkZllK6znlRDBB8Bbjxo/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~4/H4w0W-ygK2s" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 29 Oct 2008 02:59:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/con">con</category>
      <category domain="http://securityratty.com/tag/phreaknic">phreaknic</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/con swag overview">con swag overview</category>
      <category domain="http://securityratty.com/tag/source video editor">source video editor</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/sorteal talks">sorteal talks</category>
      <category domain="http://securityratty.com/tag/hacker con">hacker con</category>
      <category domain="http://securityratty.com/tag/lee eat jerky">lee eat jerky</category>
      <source url="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~3/H4w0W-ygK2s/i.php">Phreaknic 12 (2008) Hacker Con</source>
    </item>
    <item>
      <title><![CDATA[Phreaknic 12 (2008) Hacker Con]]></title>
      <link>http://securityratty.com/article/91dad2a3ec5ac9d4f78bd2d1a2bb18c2</link>
      <guid>http://securityratty.com/article/91dad2a3ec5ac9d4f78bd2d1a2bb18c2</guid>
      <description><![CDATA[New Video: Phreaknic 12 (2008) Hacker Con

This is a quick and dirty video documentary of the things that when on around the talks and event at Phreaknic 12 (2008). Don't watch if you get sick at...]]></description>
      <content:encoded><![CDATA[New Video: <a href="http://www.irongeek.com/i.php?page=videos/phreaknic-12-hacker-con">Phreaknic 12 (2008) Hacker Con</FONT></B></a>
<p></p>
<p>This is a quick and dirty video documentary of the things that when on around the talks and event at <a href="http://www.phreaknic.info">Phreaknic 12 </a>(2008). Don't watch if you get sick at shaky cam movies like Blair Witch or Cloverfield. A rough timeline of the content in the video is as follows: </p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Intro and leaving Louisville with Brian. Morgellon talks about hacking the <a href="http://dailyduino.com/">Arduino</a> micro controller platform.&nbsp;Sorteal talks about the LiVes Open Source video editor. AT&amp;T Batman building by night. Mojo-JoJo soldering some stuff for the shooting range. The patron gods of hackerdom. Registration. Con swag overview. Morgellon&nbsp; gets his discreet logic on. AK-47 building with HandGrip and Buttstock. Froggy talks up Notacon, which I plan to go to next year. Skydog explains the Jware chair toss event, and then we compete. Rootwars hacker wargames. I ask <a href="http://dualcoremusic.com/nerdcore/">Int80 about using his nerdcore</a> music in some of my videos. NotLarry explains rootwars. Some iPhone hacking with <a href="http://leebaird.com/Me/Hacking.html">Lee Baird</a> and John Skinner. I do a little <a href="http://www.irongeek.com/i.php?page=security/bluecasing1">Bluecaseing/Warnibbling </a>with the Bluetooth on my Nokia n810. John, Lee, Brian and I go to the German restaurant. I blind DOSman with the light from my camera and check out what folks are doing with the <a href="http://dailyduino.com/">Arduinos</a> Droops brought for folks to play with. I check back in on R00tW4rz. I blind Droops. I talk Ettercap filters with <a href="http://www.rmccurdy.com/">operat0r</a>. USB door key fun with the <a href="http://dailyduino.com/">Arduino</a>. More breadboard fun. Nokia n810 + Ettercap Filter + Lemon-part = win. <a href="http://dualcoremusic.com/nerdcore/">Int80</a> gets down with his own bad self, and the rest of Phreaknic. I find an energy drink with protein. Folks play with the hardware keyloggers I brought, and we have some epic fail with the IBM Model M + USB adapter + Mac OS 10.5. <a href="http://www.winnschwartau.com/">Winn Schwartau</a> joins in on the keylogger fun. <a href="http://www.packetsniffers.org/">DOSman and Zack</a> use a directional antenna from the 9th floor to search downtown Nashville for WiFi access points. Zoom in on Al. John and Lee eat jerky. <a href="http://www.hak5.org/">Daren and Shannon from Hak5</a> blind me this time. :) Then they do a quick interview. I interview <a href="http://www.digome.com/">TRiP</a> about the legalities of wardriving, sniffing and leaving your access point open so you have plausible deniability of copyright infringement (most likely it won't hold water in court if you are a computer geek). I give Hak5 Daren beef jerky. <a href="http://www.offensive-security.com/">Ziplock</a> had more con badges than God. I meet up with Iridium. I talk with Nightcarnage about the audio/video setup at Phreaknic. As I predicted, the <a href="http://www.shmoo.com/~gdead/Site/Home.html">Potters</a> won the WiFi Race. I say why this was the best Phreaknic ever. Using green lasers on crack dealers. Techno in the dark, the Aiptek action HD does not do well in low light. Nicodemius shows off his Minority Report like multi-touch table. Hula hoop contest. I check back in with Jeff Cotton and his USB keyed door. I strap on my gear to leave the con. Brian and I do a wrap up of our thoughts on Phreaknic 2008.</p>]]></content:encoded>
      <pubDate>Wed, 29 Oct 2008 02:59:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/con">con</category>
      <category domain="http://securityratty.com/tag/phreaknic">phreaknic</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/con swag overview">con swag overview</category>
      <category domain="http://securityratty.com/tag/source video editor">source video editor</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/sorteal talks">sorteal talks</category>
      <category domain="http://securityratty.com/tag/hacker con">hacker con</category>
      <category domain="http://securityratty.com/tag/lee eat jerky">lee eat jerky</category>
      <source url="http://www.irongeek.com/i.php?page=videos/phreaknic-12-hacker-con">Phreaknic 12 (2008) Hacker Con</source>
    </item>
    <item>
      <title><![CDATA[Phreaknic 12 (2008) Hacker Con]]></title>
      <link>http://securityratty.com/article/215684d0c6bd7ef7ac4756e6b556cf79</link>
      <guid>http://securityratty.com/article/215684d0c6bd7ef7ac4756e6b556cf79</guid>
      <description><![CDATA[New Video: Phreaknic 12 (2008) Hacker Con

This is a quick and dirty video documentary of the things that when on around the talks and event at Phreaknic 12 (2008). Don't watch if you get sick at...]]></description>
      <content:encoded><![CDATA[New Video: <a href="http://www.irongeek.com/i.php?page=videos/phreaknic-12-hacker-con">Phreaknic 12 (2008) Hacker Con</FONT></B></a>
<p></p>
<p>This is a quick and dirty video documentary of the things that when on around the talks and event at <a href="http://www.phreaknic.info">Phreaknic 12 </a>(2008). Don't watch if you get sick at shaky cam movies like Blair Witch or Cloverfield. A rough timeline of the content in the video is as follows: </p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Intro and leaving Louisville with Brian. Morgellon talks about hacking the <a href="http://dailyduino.com/">Arduino</a> micro controller platform.&nbsp;Sorteal talks about the LiVes Open Source video editor. AT&amp;T Batman building by night. Mojo-JoJo soldering some stuff for the shooting range. The patron gods of hackerdom. Registration. Con swag overview. Morgellon&nbsp; gets his discreet logic on. AK-47 building with HandGrip and Buttstock. Froggy talks up Notacon, which I plan to go to next year. Skydog explains the Jware chair toss event, and then we compete. Rootwars hacker wargames. I ask <a href="http://dualcoremusic.com/nerdcore/">Int80 about using his nerdcore</a> music in some of my videos. NotLarry explains rootwars. Some iPhone hacking with <a href="http://leebaird.com/Me/Hacking.html">Lee Baird</a> and John Skinner. I do a little <a href="http://www.irongeek.com/i.php?page=security/bluecasing1">Bluecaseing/Warnibbling </a>with the Bluetooth on my Nokia n810. John, Lee, Brian and I go to the German restaurant. I blind DOSman with the light from my camera and check out what folks are doing with the <a href="http://dailyduino.com/">Arduinos</a> Droops brought for folks to play with. I check back in on R00tW4rz. I blind Droops. I talk Ettercap filters with <a href="http://www.rmccurdy.com/">operat0r</a>. USB door key fun with the <a href="http://dailyduino.com/">Arduino</a>. More breadboard fun. Nokia n810 + Ettercap Filter + Lemon-part = win. <a href="http://dualcoremusic.com/nerdcore/">Int80</a> gets down with his own bad self, and the rest of Phreaknic. I find an energy drink with protein. Folks play with the hardware keyloggers I brought, and we have some epic fail with the IBM Model M + USB adapter + Mac OS 10.5. <a href="http://www.winnschwartau.com/">Winn Schwartau</a> joins in on the keylogger fun. <a href="http://www.packetsniffers.org/">DOSman and Zack</a> use a directional antenna from the 9th floor to search downtown Nashville for WiFi access points. Zoom in on Al. John and Lee eat jerky. <a href="http://www.hak5.org/">Daren and Shannon from Hak5</a> blind me this time. :) Then they do a quick interview. I interview <a href="http://www.digome.com/">TRiP</a> about the legalities of wardriving, sniffing and leaving your access point open so you have plausible deniability of copyright infringement (most likely it won't hold water in court if you are a computer geek). I give Hak5 Daren beef jerky. <a href="http://www.offensive-security.com/">Ziplock</a> had more con badges than God. I meet up with Iridium. I talk with Nightcarnage about the audio/video setup at Phreaknic. As I predicted, the <a href="http://www.shmoo.com/~gdead/Site/Home.html">Potters</a> won the WiFi Race. I say why this was the best Phreaknic ever. Using green lasers on crack dealers. Techno in the dark, the Aiptek action HD does not do well in low light. Nicodemius shows off his Minority Report like multi-touch table. Hula hoop contest. I check back in with Jeff Cotton and his USB keyed door. I strap on my gear to leave the con. Brian and I do a wrap up of our thoughts on Phreaknic 2008.</p>
<p><a href="http://feedads.googleadservices.com/~a/fu-jGbBXkZllK6znlRDBB8Bbjxo/a"><img src="http://feedads.googleadservices.com/~a/fu-jGbBXkZllK6znlRDBB8Bbjxo/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~4/f9ViIhlukDU" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 29 Oct 2008 02:59:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/con">con</category>
      <category domain="http://securityratty.com/tag/phreaknic">phreaknic</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/con swag overview">con swag overview</category>
      <category domain="http://securityratty.com/tag/source video editor">source video editor</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/sorteal talks">sorteal talks</category>
      <category domain="http://securityratty.com/tag/hacker con">hacker con</category>
      <category domain="http://securityratty.com/tag/lee eat jerky">lee eat jerky</category>
      <source url="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~3/f9ViIhlukDU/i.php">Phreaknic 12 (2008) Hacker Con</source>
    </item>
    <item>
      <title><![CDATA[Credit Card Protections Abroad]]></title>
      <link>http://securityratty.com/article/15312f4bced87019b30fb55ceb94fd45</link>
      <guid>http://securityratty.com/article/15312f4bced87019b30fb55ceb94fd45</guid>
      <description><![CDATA[When you pay by credit card in a restaurant, have you ever wondered what they do with your card when they take it from you to collect payment? Although you may trust the restaurant, theres still the...]]></description>
      <content:encoded><![CDATA[<div class="entry-body">
<div>
<div class="item-body">
<div>
<div>
<p>When you pay by credit card in a restaurant, have you ever wondered what they do with your card when they take it from you to collect payment? Although you may trust the restaurant, there&#8217;s still the possibility the waiters can write your credit card and verification number down and sell the info later.</p>
<p>Apparently in the UK and other European areas, this is not the case. <a rel="nofollow" target="_blank" href="https://365.rsaconference.com/blogs/ira_winkler/2008/10/09/the-us-has-a-lot-to-learn">Ira Winkler </a>at the RSA blog recently wrote about an experience traveling and noticing other credit card customs and security -</p>
<blockquote><p>If you are at a restaurant and pay with a credit card, they bring over a system and swipe your card in front of you. Additionally, all the credit card readers I came in contact with assumed that credit cards were smart cards with readable chips. This adds another level of security, and PINs were required as well. When I was in The Netherlands a few months ago, I couldn&#8217;t even use my American credit card on the ticket machines for their train system.</p>
<p style="padding:0px;min-height:8pt;height:8pt;">
<p>With all of the credit card fraud going on, I wonder when the US will finally get its act together and follow the European credit card security measures.</p></blockquote>
<p>Read the full article<a rel="nofollow" target="_blank" href="https://365.rsaconference.com/blogs/ira_winkler/2008/10/09/the-us-has-a-lot-to-learn"> here.</a></div>
</div>
</div>
</div>
</div>]]></content:encoded>
      <pubDate>Fri, 10 Oct 2008 06:59:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit card">credit card</category>
      <category domain="http://securityratty.com/tag/credit card customs">credit card customs</category>
      <category domain="http://securityratty.com/tag/american credit card">american credit card</category>
      <category domain="http://securityratty.com/tag/card">card</category>
      <category domain="http://securityratty.com/tag/credit card fraud">credit card fraud</category>
      <category domain="http://securityratty.com/tag/credit card readers">credit card readers</category>
      <category domain="http://securityratty.com/tag/rsa blog recently">rsa blog recently</category>
      <category domain="http://securityratty.com/tag/restaurant">restaurant</category>
      <category domain="http://securityratty.com/tag/train system">train system</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/417034108/">Credit Card Protections Abroad</source>
    </item>
    <item>
      <title><![CDATA[Outsourcing Aids Many Data thefts, Verizon Says]]></title>
      <link>http://securityratty.com/article/bd2df1b4dbaa834efde25b0a6dded8ad</link>
      <guid>http://securityratty.com/article/bd2df1b4dbaa834efde25b0a6dded8ad</guid>
      <description><![CDATA[The reliance of restaurant chains and retail stores on outside companies to handle credit-card processing and other information-technology functions is partly to blame for a rash of consumer data...]]></description>
      <content:encoded><![CDATA[The reliance of restaurant chains and retail stores on outside companies to handle credit-card processing and other information-technology functions is partly to blame for a rash of consumer data breaches over the last few years, according to data sleuths at Verizon Communications.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=830e0f510ec9bc5e14bd1d476584b7f7" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=830e0f510ec9bc5e14bd1d476584b7f7" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=zxQlM"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=zxQlM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=fcJIm"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=fcJIm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=skeam"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=skeam" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=l7GAM"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=l7GAM" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=6c0KM"><img src="http://feeds.wired.com/~f/wired/politics/security?i=6c0KM" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=66iom"><img src="http://feeds.wired.com/~f/wired/politics/security?i=66iom" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=PSuKm"><img src="http://feeds.wired.com/~f/wired/politics/security?i=PSuKm" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=335TM"><img src="http://feeds.wired.com/~f/wired/politics/security?i=335TM" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/409258679" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/409258681" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 02 Oct 2008 00:55:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/consumer data breaches">consumer data breaches</category>
      <category domain="http://securityratty.com/tag/verizon communications">verizon communications</category>
      <category domain="http://securityratty.com/tag/handle credit-card">handle credit-card</category>
      <category domain="http://securityratty.com/tag/retail stores">retail stores</category>
      <category domain="http://securityratty.com/tag/restaurant chains">restaurant chains</category>
      <category domain="http://securityratty.com/tag/data sleuths">data sleuths</category>
      <category domain="http://securityratty.com/tag/rash">rash</category>
      <category domain="http://securityratty.com/tag/companies">companies</category>
      <category domain="http://securityratty.com/tag/blame">blame</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/409258681/TEC_DATA_BREACHES">Outsourcing Aids Many Data thefts, Verizon Says</source>
    </item>
    <item>
      <title><![CDATA[Modelling Shoplifting]]></title>
      <link>http://securityratty.com/article/3943f3c70f24e801812a87cf0b0b61f8</link>
      <guid>http://securityratty.com/article/3943f3c70f24e801812a87cf0b0b61f8</guid>
      <description><![CDATA[The other day I was thinking that I should write about specific situation models and by coincident Marc Adler pens CEP and Shoplifting . In Marcs post, Marc begins to model shoplifting as if...]]></description>
      <content:encoded><![CDATA[<p>The other day I was thinking that I should write about specific situation models and by coincident Marc Adler pens <a href="http://magmasystems.blogspot.com/2008/09/cep-and-shoplifting.html" target="_blank">CEP and Shoplifting</a>.  In Marc&#8217;s post, Marc begins to model shoplifting as if shoplifting is &#8220;market data,&#8221; with Level 1 to Level 4 shoplifting &#8220;quotes&#8221; - the natural approach for a brilliant guy from Citi.   In reality, this model does not work very well, and I&#8217;ll touch on a few reasons why today.</p>
<p>Marc&#8217;s initial shoplifting model in his post is based on John <span id="SPELLING_ERROR_3" class="blsp-spelling-error">Colapinto&#8217;s concepts of matching a pattern of customer movements in the store with their estimated patterns of shoplifting behavioral patterns.    Marc&#8217;s asks how Coral8 might address this.   We are not ready to seek a vendor solution.  We do not yet have a workable detection model.</span></p>
<p><span class="blsp-spelling-error">As indicated above, I don&#8217;t think the example situation cited by John and Marc is a viable model for automated processing.    Tracking the behavior of customer&#8217;s movements, by machine, would require some very sophisticated image processing technology that would be too expensive compared to any possible loss at most retails stores.    This type of behavioral pattern recognition. in retail stores, is performed by people (security personnel), not machines, observing people.  </span></p>
<p><span class="blsp-spelling-error">To develop a machine pattern recognition application to detect retail shoplifting we need to build detection models that are economically feasible.  If we are going to use a model of shoplifting pattern recognition versus anomaly detection, we need to define the objects we must track.   </span></p>
<p><span class="blsp-spelling-error">In the most simple model, we have merchandise-objects.   Stores normally (physically) track merchandise-objects only at the exit/entry points of the store using some electromagnetic proximity detection technology.   In this model, the detection configuration is a combination of simple alerting with humans watching the store (&#8221;minding the store&#8221;).    This is not complex event processing.</span></p>
<p><span class="blsp-spelling-error">However, if we added another object to our model, the customer-object, then we start to get more &#8220;complex,&#8221; but we have not defined &#8220;complexity&#8221; yet because we have not defined the object properties, the possible states of the objects, and the relationships between the objects that are the basis for estimated situations.</span></p>
<p><span class="blsp-spelling-error">Hence, model building is constrained by available resources, simple economics and risk (cost-benefit).  If we are detecting shoplifting in Walmart the cost-benefit model for implementing an automated shoplifting detection system would be different than at a top diamond store on 5th Avenue in NYC.   Protecting loss at a weapons-grade uranium respository follows a different model than protecting loss at a handicraft shop, naturally.</span></p>
<p><span class="blsp-spelling-error">Like Marc, I find models to automatically detect shoplifting interesting, so permit me to close with a general discussion of shoplifting in the context of our <a href="http://www.thecepblog.com/what-is-complex-event-processing/" target="_blank">CEP/EP reference model</a>.</span></p>
<p><span class="blsp-spelling-error"><span class="blsp-spelling-error">One approach would be do determine what objects will be represented in our model.   For example, if we are going to track merchandise, we need to model the &#8221;merchandise-object&#8221;.  If we are going to track people, we need to define the properties of this &#8220;person object.&#8221;  If we are going to represent the store layout, we need to define all these objects (store-object, table-object, shelf-object, entry-object and so forth).  The model can get &#8220;complex&#8221; quite quickly.  </span></span></p>
<blockquote><p><span class="blsp-spelling-error"><span class="blsp-spelling-error">Editorial Note:  <em>An object-oriented approach greatly assists complex model building because we can benefit from OO properties such as encapsulation and polymorphism.  For example, we can define a basic &#8220;person object class&#8221; and then create superclasses of this object for &#8220;customer-object&#8221;, &#8220;manager-object&#8221;, &#8220;or criminal-object.&#8221;</em></span></span></p></blockquote>
<p><span class="blsp-spelling-error"><span class="blsp-spelling-error">Generally speaking, each object we define will require a state-model, for example, in Marc&#8217;s example of a customer moving around the store, we would need to model the possible states (customer at the entrance, at table 1, at table 2, at shelf 1, in the bathroom, at the cashier, etc.)  Indeed Marc, this is complex event processing if we have modelled multiple objects and defined object-object relationships that indicate situations of interest.   For example, customer-object at table2 where merchandise-object has the property of  &#8221;very expensive, high risk&#8221; and then customer-object changes state to &#8220;in bathroom&#8221;.  Of course, we need more key indicators, but you get the idea.</span></span></p>
<p><span class="blsp-spelling-error"><span class="blsp-spelling-error">Right now, I am typing from the <a href="http://www.taste4heaven.com">Taste from Heaven Vegetarian Restaurant</a> in Chiang Mai and my battery is running low.  The owner of this excellent restaurant also runs the <a href="http://www.elephantnaturefoundation.org/" target="_blank">Elephant Nature Park</a>, a non-profit organization advocating and acting on behalf of the rights of the mighty elephants in Thailand.  Would be great if we could also automatically detect the situation of &#8220;elephant abuse&#8221; by poachers and other crimes against nature.   Time to get back to my delicious mushroom salad, Northeastern Thai style.</span></span></p>
<p><span class="blsp-spelling-error"><span class="blsp-spelling-error">As always, thanks for reading, time for me to get back to eating!</span></span></p>
<p> </p>
]]></content:encoded>
      <pubDate>Sun, 07 Sep 2008 03:30:15 +0000</pubDate>
      <category domain="http://securityratty.com/tag/store">store</category>
      <category domain="http://securityratty.com/tag/store-object">store-object</category>
      <category domain="http://securityratty.com/tag/complex">complex</category>
      <category domain="http://securityratty.com/tag/model canget complex">model canget complex</category>
      <category domain="http://securityratty.com/tag/model">model</category>
      <category domain="http://securityratty.com/tag/simple">simple</category>
      <category domain="http://securityratty.com/tag/simple economics">simple economics</category>
      <category domain="http://securityratty.com/tag/simple model">simple model</category>
      <category domain="http://securityratty.com/tag/object">object</category>
      <source url="http://www.thecepblog.com/2008/09/07/modelling-shoplifting/">Modelling Shoplifting</source>
    </item>
    <item>
      <title><![CDATA[Software to Facilitate Retail Tax Fraud]]></title>
      <link>http://securityratty.com/article/c541c0e2a682f8958bb71c87da49a528</link>
      <guid>http://securityratty.com/article/c541c0e2a682f8958bb71c87da49a528</guid>
      <description><![CDATA[Interesting : Thanks to a software program called a zapper, even technologically illiterate restaurant and store owners can siphon cash from computer cash registers and cheat tax officials

Zappers...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.nytimes.com/2008/08/30/technology/30zapper.html">Interesting</a>:</p>

<blockquote>Thanks to a software program called a zapper, even technologically illiterate restaurant and store owners can siphon cash from computer cash registers and cheat tax officials.

<p>[...]</p>

<p>Zappers alter the electronic sales records in a cash register. To satisfy tax collectors, the tally of food orders, for example, must match the register's final cash total. To hide the removal of cash from the till, a crooked business owner has to erase the record of food orders equal to the amount of cash taken; otherwise, the imbalance is obvious to any auditor.</p>

<p>[...]</p>

<p>The more sophisticated zappers are easy to use, according to several experts. A dialogue box, which shows the day's tally, pops up on the register's screen. </p>

<p>In a second dialogue box, the thief chooses to take a dollar amount or percentage of the till. The program then calculates which orders to erase to get close to the amount of cash the person wants to remove. Then it suggests how much cash to take, and it erases the entries from the books and a corresponding amount in orders, so the register balances.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=b0MQKL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=b0MQKL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=mqs4qL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=mqs4qL" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 08:24:22 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cash">cash</category>
      <category domain="http://securityratty.com/tag/cash register">cash register</category>
      <category domain="http://securityratty.com/tag/siphon cash">siphon cash</category>
      <category domain="http://securityratty.com/tag/computer cash registers">computer cash registers</category>
      <category domain="http://securityratty.com/tag/final cash total">final cash total</category>
      <category domain="http://securityratty.com/tag/register">register</category>
      <category domain="http://securityratty.com/tag/dollar amount">dollar amount</category>
      <category domain="http://securityratty.com/tag/amount">amount</category>
      <category domain="http://securityratty.com/tag/dialogue box">dialogue box</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/software_to_fac.html">Software to Facilitate Retail Tax Fraud</source>
    </item>
    <item>
      <title><![CDATA[Taco Bueno taps ConSentry for more than switching]]></title>
      <link>http://securityratty.com/article/0aa0e46cb497ec4d178765549d078b39</link>
      <guid>http://securityratty.com/article/0aa0e46cb497ec4d178765549d078b39</guid>
      <description><![CDATA[When restaurant chain Taco Bueno ran out of access ports it decided to buy ConSentry switches in part because they helped fill security and access control needs that other switches...]]></description>
      <content:encoded><![CDATA[When restaurant chain Taco Bueno ran out of access ports it decided to buy ConSentry switches in part because they helped fill security and access control needs that other switches couldn't.]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/consentry switches">consentry switches</category>
      <category domain="http://securityratty.com/tag/switches">switches</category>
      <category domain="http://securityratty.com/tag/fill security">fill security</category>
      <category domain="http://securityratty.com/tag/access ports">access ports</category>
      <category domain="http://securityratty.com/tag/access control">access control</category>
      <source url="http://www.networkworld.com/news/2008/081308-taco-bueno-consentry-switches.html?fsrc=rss-security">Taco Bueno taps ConSentry for more than switching</source>
    </item>
  </channel>
</rss>
