<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: rural]]></title>
    <link>http://securityratty.com/tag/rural</link>
    <description></description>
    <pubDate>Tue, 19 Feb 2008 04:18:32 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Turning off Fire Hydrants in the Name of Terrorism]]></title>
      <link>http://securityratty.com/article/f6930719122f72be0df5cd2f10adaea5</link>
      <guid>http://securityratty.com/article/f6930719122f72be0df5cd2f10adaea5</guid>
      <description><![CDATA[This really pegs the stupid meter: He explains all the district's hydrants, including those in Alexander Ranch, have had their water turned off since just after 9/11 -- something a trade association...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.wfaa.com/sharedcontent/dws/wfaa/latestnews/stories/wfaa080827_lj_hawes.1983f2d0.html">This</a> really pegs the stupid meter:</p>

<blockquote>He explains all the district's hydrants, including those in Alexander Ranch, have had their water turned off since just after 9/11 -- something a trade association spokesman tells us is common practice for rural systems.

<p>"These hydrants need to be cut off in a way to prevent vandalism or any kind of terrorist activity, including something in the water lines," Hodges said.</p>

<p>But Hodges says fire departments know, or should have known, the water valves can be turned back on with a tool.</blockquote></p>

<p>One, fires are much more common than terrorism -- keeping fire hydrants on makes much more sense than turning them off.  Two, what sort of terrorism is possible using working fire hydrants?  Three, if the water valves can be "turned back on with a tool," how does turning them off prevent fire-hydrant-related terrorism?</p>

<p>More and more, it seems as if public officials in this country have simply gone insane.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=65IeL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=65IeL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=A1h0L"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=A1h0L" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 11 Sep 2008 09:59:42 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hydrants">hydrants</category>
      <category domain="http://securityratty.com/tag/fire hydrants">fire hydrants</category>
      <category domain="http://securityratty.com/tag/water valves">water valves</category>
      <category domain="http://securityratty.com/tag/water">water</category>
      <category domain="http://securityratty.com/tag/terrorism">terrorism</category>
      <category domain="http://securityratty.com/tag/water lines">water lines</category>
      <category domain="http://securityratty.com/tag/prevent">prevent</category>
      <category domain="http://securityratty.com/tag/common">common</category>
      <category domain="http://securityratty.com/tag/prevent vandalism">prevent vandalism</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/turning_off_fir.html">Turning off Fire Hydrants in the Name of Terrorism</source>
    </item>
    <item>
      <title><![CDATA[Modelling Air Traffic Control]]></title>
      <link>http://securityratty.com/article/7f9e569822e0521bce9615d70124032f</link>
      <guid>http://securityratty.com/article/7f9e569822e0521bce9615d70124032f</guid>
      <description><![CDATA[Today I will discussa general approach to model air traffic control (ATC)using our CEP/EP reference architecture which is an application of the mature JDL multisensor data fusion model
ATC is an...]]></description>
      <content:encoded><![CDATA[<p>Today I will discuss a general approach to model air traffic control (ATC) using our <a href="http://www.thecepblog.com/what-is-complex-event-processing/" target="_blank">CEP/EP reference architecture </a>which is an application of the mature <a href="http://www.data-fusion.org/article.php?sid=70" target="_blank">JDL multisensor data fusion model</a>.</p>
<p>ATC is an excellent working example of complex event processing.   Radar and GPS provide the basic sensory information to accurately track and trace the position of each aircraft in the area of responsibility (AOR) of a particular control tower/zone.     Naturally,  sensory information is preprocessed and formatted in such a way that the data can be processed upstream by multiple real-time applications.</p>
<p>Before we look at complex ATC scenarios, such as &#8220;potential collision&#8221; or &#8220;aircraft off approach vector&#8221; we must trace and trace individual objects, aircraft-objects, accurately with very high confidence.    In addition to tracking aircraft-objects, there is a database of information about the aircraft (ideally), such as make, model, age, range, passengers and other properties about the aircraft-object.      In addition, there is a state-model for each aircraft, for example the aircraft might be &#8220;on the ground&#8221;, &#8220;approaching the runway&#8221;, &#8220;cleared for takeoff&#8221;, &#8220;cruising altitude&#8221;, &#8220;approaching runway&#8221;, &#8220;final decent&#8221; etc.  </p>
<p>Tracking and tracing individual aircraft is what is generally referred to as &#8220;object refinement&#8221; in our CEP/EP reference architecture.   The reason we call this function &#8220;object refinement&#8221; is that system engineers are focused on optimizing the situational knowledge about individual objects.     Sometimes we refer to this function as &#8220;track and trace&#8221; because that is what we are doing to  each object in the model.  In Marc Adler&#8217;s recent <a href="http://www.thecepblog.com/2008/09/07/modelling-shoplifting/" target="_blank">shoplifting scenario</a>, Marc was interested in tracking and tracing people in a store using imaging processing techniques to estimate their behavioral patterns.  In the same way, before we can process for scenarios such as &#8220;potential shoplifter&#8221; or &#8220;suspicious criminal gang activity&#8221; we must be able to accurately process (track and trace) individual object, such as people or merchandise.</p>
<p>Back to aircraft and ATC, the &#8220;complex event processing&#8221; begins when we are looking about object-object relationships, in this model, aircraft-to-aircraft, but this is an overly simplistic model, as we have not yet added (to our model) ground features (towers, buildings, power lines), weather (storm cells, wind) and other flying objects (known migratory bird paths, swarms of insects) to our simple model.  </p>
<p>Complex event processing occurs when we are processing multiple objects in our model looking for threats in real-time.     Practically speaking, all ATC applications are CEP applications.  This means that vendors and integrators who build ATC applications are also CEP vendors.   </p>
<blockquote><p>Editorial Note: CEP/EP has been around for a long time and was not recently invented in the past decade as some &#8220;inventors&#8221; would like for us to believe. </p></blockquote>
<p>As you can imagine, there is considerable &#8220;complex event processing&#8221; that goes on &#8220;behind the scenes&#8221; to provide air traffic controllers and pilots situational knowledge into the &#8220;friendly skies&#8221;.   As you might further imagine, the situation is more complex when the skies are &#8220;not so friendly&#8221;, for example, in air combat situations.   </p>
<p>Processing myriad objects is not the end of the processing &#8220;chain&#8221;.  For example, decisions are being made constantly about potential damage, alternative airports, and more.    In our reference model, we refer to this, generally speaking, as &#8220;impact assessment&#8221; because we must take an estimated detected complex event, for example &#8220;aircraft collision,&#8221; and estimate potential damage based on numerous factors such as, the amount of jet fuel in the aircrafts and the location of the aircrafts (over a large city or rural area, near a hospital and emergency services).   Regardless of the scenario, an impact assessment is normally required before optimal decisions can be made.</p>
<blockquote><p>This is true, by the way, for our <a href="http://www.thecepblog.com/2008/09/07/modelling-shoplifting/" target="_blank">shoplifting example</a> (the impact is different if a piece of gum is stolen versus a $1,000,000 diamond necklace or weapons-grade nuclear material) and other scenarios and models.  Static data (information about objects) is required for accurate decision processing.  </p></blockquote>
<p>Impact assessment is not the end of the &#8220;knowledge chain&#8221;.    Decisions are constantly being made that effect resources.  For example, suggestion an alternative route for an aircraft is a resource management decision.    Turning on and off radar or switching to alternative tracking devices is a resource management function.  In our CEP/EP reference model (based on the JDL data fusion model), we call this &#8220;resource management&#8221;.   This function includes contacting emergency services and directing them to a potential crash location or sending out a message to instruct all aircraft to stay off a certain radio frequency.  Resource management is critical.</p>
<p>Our simple ATC model today is by no means complete, it just scratches the surface.  In fact, I have a very close friend, <a href="http://www.linkedin.com/pub/0/b45/b16" target="_blank">Mark Secrist</a>, who is a former Marine fighter pilot and currently a senior captain for <a href="http://www.aa.com" target="_blank">American Airlines</a>.   I have asked Mark to read this post and help me further refine this crude &#8220;laymans&#8221; ATC model (Thanks Mark!).</p>
]]></content:encoded>
      <pubDate>Mon, 08 Sep 2008 09:27:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/model">model</category>
      <category domain="http://securityratty.com/tag/crude laymansatc model">crude laymansatc model</category>
      <category domain="http://securityratty.com/tag/state-model">state-model</category>
      <category domain="http://securityratty.com/tag/simple atc model">simple atc model</category>
      <category domain="http://securityratty.com/tag/complex">complex</category>
      <category domain="http://securityratty.com/tag/isconsiderable complex event">isconsiderable complex event</category>
      <category domain="http://securityratty.com/tag/overly simplistic model">overly simplistic model</category>
      <category domain="http://securityratty.com/tag/complex event">complex event</category>
      <category domain="http://securityratty.com/tag/simple model">simple model</category>
      <source url="http://www.thecepblog.com/2008/09/08/modelling-air-traffic-control/">Modelling Air Traffic Control</source>
    </item>
    <item>
      <title><![CDATA[Banker Malware Targeting Brazilian Banks in the Wild]]></title>
      <link>http://securityratty.com/article/4c146364a5e5366271bb42a4f795af8d</link>
      <guid>http://securityratty.com/article/4c146364a5e5366271bb42a4f795af8d</guid>
      <description><![CDATA[Despite the ongoing customerization of malware, and the malware coding for hire customer tailored services, certain malware authors still believe in the product concept, namely, they build it and wait...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKldLvANUBI/AAAAAAAACC8/4JM_2PVEVY4/s1600-h/banker_malware_brazil_banks.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKldLvANUBI/AAAAAAAACC8/zzcjUAMw61E/s200-R/banker_malware_brazil_banks.jpg" /></a>Despite the ongoing customerization of malware, and the malware coding for hire customer tailored services, certain malware authors still believe in the product concept, namely, they build it and wait for someone to come. In this underground proposition for a proprietary banker malware targeting primarily Brazillian bank, the author is relying on the localized value added to his malware forgetting a simply fact - that the most popular banker malware is generalizing E-banking transactions in such a way that it's successfully able to hijack the sessions of banks it hasn't originally be coded to target in general.<br />
<br />
<b>Banks targetted in this banker malware :</b><br />
<i>Bank Equifax<br />
Bank Itau<br />
Bank Check<br />
Bank Vivo<br />
Bank Banrisul<br />
Tim Bank Brazil<br />
Bank Nossa Caixa<br />
Bank Santander Banespa<br />
Bank Infoseg<br />
Bank Paypal <br />
Bank Caixa Economica Federal<br />
Bank Bradesco<br />
Bank Northeast<br />
Royal Bank<br />
Bank Itau Personnalite<br />
Bank PagSeguro<br />
Australia Bank<br />
Credicard Citi Bank<br />
Credicard Bank Itau<br />
Rural Bank</i><br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SKlgsZBqOLI/AAAAAAAACDE/kN2MQLJqjls/s1600-h/banker_malware_brazil_banks1.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SKlgsZBqOLI/AAAAAAAACDE/niBpSaKVaTE/s200-R/banker_malware_brazil_banks1.jpg" /></a>Taking into consideration the fact that not everyone would be willing to pay a couple of thousand dollars for a <a href="http://ddanchev.blogspot.com/2007/11/metaphisher-malware-kit-spotted-in-wild.html">banker malware kit targeting banks the customer isn't interested in at the first place</a>, malware authors have long been tailoring their propositions on the basis of modules. Adding an additional module for stealtness increases the prices, as well as an additional module forwarding the process of updating the malware binary to the "customer support desk". Moreover, stripping the banker kit from modules in which the customer doesn't have interest, like for instance exclude all Asian banks the kit has already built-in capabilities to hijack and log transactions from, decreases its price.<br />
<br />
In a truly globalized IT underground, Brazillian cybercriminals tend to prefer using the <a href="http://ddanchev.blogspot.com/2008/04/crimeware-in-middle-zeus.html">market leading tools courtesy of Russian malware authors</a>, so this localized banker malware with its basic session screenshot taking capabilities and accounting data logging has a very long way to go before it starts getting embraced by the local underground.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/08/twitter-malware-campaign-wants-to-bank.html">The Twitter Malware Campaign Wants to Bank With You</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/targeted-spamming-of-bankers-malware.html">Targeted Spamming of Bankers Malware</a><br />
<a href="http://ddanchev.blogspot.com/2008/03/localized-bankers-malware-campaign.html">A Localized Bankers Malware Campaign</a><br />
<a href="http://ddanchev.blogspot.com/2008/08/76service-cybercrime-as-service-going.html">76Service - Cybercrime as a Service Going Mainstream</a><br />
<a href="http://ddanchev.blogspot.com/2007/03/underground-economys-supply-of-goods.html">The Underground Economy's Supply of Goods and Services</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/dynamics-of-malware-industry.html">The Dynamics of the Malware Industry - Proprietary Malware Tools</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/using-market-forces-to-disrupt-botnets.html">Using Market Forces to Disrupt Botnets</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/multiple-firewalls-bypassing.html">Multiple Firewalls Bypassing Verification on Demand</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/managed-spamming-appliances-future-of.html">Managed Spamming Appliances - The Future of Spam</a><br />
<a href="http://ddanchev.blogspot.com/2008/02/localizing-cybercrime-cultural.html">Localizing Cybercrime - Cultural Diversity on Demand</a><br />
<a href="http://ddanchev.blogspot.com/2008/01/e-crime-and-socioeconomic-factors.html">E-crime and Socioeconomic Factors</a><b>&nbsp;</b><br />
<a href="http://ddanchev.blogspot.com/2007/08/malware-as-web-service.html">Malware as a Web Service</a><b>&nbsp;</b><br />
<a href="http://ddanchev.blogspot.com/2008/07/coding-spyware-and-malware-for-hire.html">Coding Spyware and Malware for Hire</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/are-stolen-credit-card-details-getting.html">Are Stolen Credit Card Details Getting Cheaper?</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/neosploit-team-leaving-it-underground.html">Neosploit Team Leaving the IT Underground</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/zeus-crimeware-kit-vulnerable-to.html">The Zeus Crimeware Kit Vulnerable to Remotely Exploitable Flaw</a><br />
<a href="http://ddanchev.blogspot.com/2008/08/pinch-vulnerable-to-remotely.html">Pinch Vulnerable to Remotely Exploitable Flaw</a><br />
<a href="http://ddanchev.blogspot.com/2008/07/dissecting-managed-spamming-service.html">Dissecting a Managed Spamming Service</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/managed-spamming-appliances-future-of.html">Managed "Spamming Appliances" - The Future of Spam</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=UycytK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=UycytK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=aWvyIK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=aWvyIK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=KGP6hk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=KGP6hk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=1wZEOk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=1wZEOk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=PycnBK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=PycnBK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=KVzVsK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=KVzVsK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=XGelDk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=XGelDk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/368038328" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 03:01:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/banker malware">banker malware</category>
      <category domain="http://securityratty.com/tag/banker malware kit">banker malware kit</category>
      <category domain="http://securityratty.com/tag/kit">kit</category>
      <category domain="http://securityratty.com/tag/popular banker malware">popular banker malware</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/bank itau personnalite">bank itau personnalite</category>
      <category domain="http://securityratty.com/tag/bank itau">bank itau</category>
      <category domain="http://securityratty.com/tag/malware authors">malware authors</category>
      <category domain="http://securityratty.com/tag/russian malware authors">russian malware authors</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/368038328/banker-malware-targetting-brazilian.html">Banker Malware Targeting Brazilian Banks in the Wild</source>
    </item>
    <item>
      <title><![CDATA[Mobile Post: Rural Wireless Broadband]]></title>
      <link>http://securityratty.com/article/700d4da98a11547b12532fbd2ed97d1c</link>
      <guid>http://securityratty.com/article/700d4da98a11547b12532fbd2ed97d1c</guid>
      <description><![CDATA[What will happen to wireless broadband in less-populated areas? I discuss what I said to the Rainier Communications Commission in Pierce County, Wash., about the coming growth of mobile broadband...]]></description>
      <content:encoded><![CDATA[<!-- FM Mobile Post Top Icon -->
<script type="text/javascript" src="http://mobileposts.federatedmedia.net/top_icon.js"></script>
<!-- /FM Mobile Post Top Icon -->
<strong>What will happen to wireless broadband in less-populated areas?</strong> I discuss what I said to the Rainier Communications Commission in Pierce County, Wash., about the coming growth of mobile broadband across larger territories.<br clear="all">
<!-- FM Mobile Post Widget -->
<script type="text/javascript" src="http://mobileposts.federatedmedia.net/wifinetnews/856/mobile_post.js"></script>
<!-- /FM Mobile Post Widget -->]]></content:encoded>
      <pubDate>Fri, 23 May 2008 06:03:51 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wireless broadband">wireless broadband</category>
      <category domain="http://securityratty.com/tag/rainier communications commission">rainier communications commission</category>
      <category domain="http://securityratty.com/tag/pierce county">pierce county</category>
      <category domain="http://securityratty.com/tag/larger territories">larger territories</category>
      <category domain="http://securityratty.com/tag/mobile broadband">mobile broadband</category>
      <category domain="http://securityratty.com/tag/discuss">discuss</category>
      <category domain="http://securityratty.com/tag/wash">wash</category>
      <category domain="http://securityratty.com/tag/growth">growth</category>
      <source url="http://wifinetnews.com/archives/008329.html">Mobile Post: Rural Wireless Broadband</source>
    </item>
    <item>
      <title><![CDATA[TOP 10 - HP-EDS buy, Icahn strikes again, China quakes]]></title>
      <link>http://securityratty.com/article/1e29497fd4432cb7674352b82ff07d60</link>
      <guid>http://securityratty.com/article/1e29497fd4432cb7674352b82ff07d60</guid>
      <description><![CDATA[This was a big IT news week, with the massive earthquake in China on Monday showing once again the role that the Internet plays in connecting us all, in good times and bad, and the importance of...]]></description>
      <content:encoded><![CDATA[This was a big IT news week, with the massive earthquake in China on Monday showing once again the role that the Internet plays in connecting us all, in good times and bad, and the importance of telecommunication, particularly for rural areas. HP opened the week with word that it is buying EDS. And the Microsoft-Yahoo saga was back in headlines, thanks to investor Carl Icahn, who hasn't enjoyed a good proxy fight lately and so decided to try to shake up Yahoo's board.]]></content:encoded>
      <pubDate>Thu, 15 May 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/microsoft-yahoo saga">microsoft-yahoo saga</category>
      <category domain="http://securityratty.com/tag/investor carl icahn">investor carl icahn</category>
      <category domain="http://securityratty.com/tag/yahoo">yahoo</category>
      <category domain="http://securityratty.com/tag/news week">news week</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/proxy fight">proxy fight</category>
      <category domain="http://securityratty.com/tag/eds">eds</category>
      <category domain="http://securityratty.com/tag/massive earthquake">massive earthquake</category>
      <category domain="http://securityratty.com/tag/internet plays">internet plays</category>
      <source url="http://www.networkworld.com/news/2008/051608-top-10-hp-eds-buy-icahn.html?fsrc=rss-security">TOP 10 - HP-EDS buy, Icahn strikes again, China quakes</source>
    </item>
    <item>
      <title><![CDATA[MetroFi Plans Market Exit: Sale or Shutter]]></title>
      <link>http://securityratty.com/article/64f008fcfc8f27ab4b858e3eaa8d471c</link>
      <guid>http://securityratty.com/article/64f008fcfc8f27ab4b858e3eaa8d471c</guid>
      <description><![CDATA[MetroFi will sell its networks, but plans to shutter if there are no buyers: Ah, folks, the trifecta has arrived, and I'm nothing but sad about it. MetroFi's chief Chuck Haas emailed me this evening...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" hspace="5" height="80" width="80" border="0" /><strong>MetroFi will sell its networks, but plans to shutter if there are no buyers:</strong> Ah, folks, the trifecta has arrived, and I'm nothing but sad about it. MetroFi's chief Chuck Haas emailed me this evening with the news that his firm has decided that they will sell their networks in nine cities, including their first cities in the Bay Area (Cupertino, Santa Clara, and Sunnyvale), and their largest muni deployment in Portland, Ore. If no buyers emerge--including the cities in question--Haas said that MetroFi would have a shutdown plan for gradually unlighting the networks.</p>

<p>MetroFi was one of the three most prominent pure play metro-scale Wi-Fi firms, if you count EarthLink's municipal wireless division as a separate operation, and Kite Networks, which was a subsidiary of a larger telecom firm. Each company had made a unique network hardware choice--MetroFi, SkyPilot; Kite, Strix; and EarthLink Tropos plus Motorola--and each had a sort of specialty. Interestingly, a fifth firm, BelAir powers Toronto (a small but super-fast Wi-Fi network) and Minneapolis (the only putatively completed large-city Wi-Fi network), and will be behind Cablevision's nearly $350m New York Wi-Fi plan.</p>

<p>MetroFi was the only major firm to back ad-supported no-fee access, coupled with paid, no-ads service, and higher tiered commercial offerings. They built mostly smaller cities, with Portland being their only real big city win. The firm began with the notion of building Wi-Fi out gradually as a way to provide broadband in communities that lacked service, with no municipal involvement. That plan required sparser networks and typically a home signal booster designed by SkyPilot. (Kite mostly focused on the Southwest; EarthLink on big cities.)</p>

<p>EarthLink was in many ways largely responsible for the mess that all Wi-Fi providers found themselves in last year by offering to build Philadelphia's network back in 2005 at no cost to the city--in fact, paying the city and the local utility fees. That set the stage for nearly all the RFPs that followed where, if EarthLink were a bidder or the city was aware of the alternatives, the notion was that no city dollars would be spent, even if taxpayer money wasn't "at risk"--that is, even if a city could save money by switching current line items in their telecom and data budget to a wireless network.</p>

<p>Haas noted via email that MetroFi has been working towards anchor commitments by cities for nearly two years, but the inertia of those early networks led municipalities to reject those options. In Toledo, where MetroFi had negotiated an anchor commitment, a change in administration led a new mayor to retreat from the plan. </p>

<p>Is there a future for metro-scale Wi-Fi? Yes. With thoughtfully constructed, outdoor-focused deployments centered on municipal purposes, with public access a secondary issue, it seems like these networks could still provide an inexpensive way for relatively high bandwidth compared to the alternative of cell data networks.</p>

<p>However, that advantage is likely short lived in larger markets. The near-future certainty now that there will be multiple provides offering wired broadband speed service starting later this year with Sprint/Clearwire's WiMax, and continuing through into 2012 with significant network buildout by Verizon and AT&T in several bands (including their new 700 MHz holdings).</p>

<p>While Sprint/Clearwire is talking about 120m to 140m homes passed by 2010 with their network, obviously focusing only on major markets, many of the 700 MHz licenses purchased by AT&T and Verizon carry buildout requirements with penalties. So cities outside the top 100 population markets and rural areas will still see some benefit. In those mid-tier markets, there's also the 3.65 GHz band for shared licensed use, which is a model that Azulstar is pursuing with new WiMax deployments, as <strong><a href="http://wifinetnews.com/archives/008313.html">I wrote about recently</a></strong>.</p>

<p>Competition will likely push the cost of mobile broadband far below its $60 per month 2-year contract rate of today, which then would beg the question why a city or county with good commercial coverage would need to build its own Wi-Fi network. There are still plenty of reasons to build dedicated, first-responder 4.9 GHz public safety networks, of course.</p>

<p>I've always described Wi-Fi on a metropolitan scale as the <em>best, worst technology</em>. The best, because everyone has Wi-Fi in their laptops and increasingly in handhelds and gadgets. The worst, because the technology is absolutely not designed for the purpose, unlike CDMA and GSM evolved cell standards and mobile WiMax.</p>

<p>It's possible that in the long term, looking five years out, that Wi-Fi on a metro-scale will only be needed in small towns, odd markets, and for highly particular purposes. Or, perhaps in a bit of irony, where companies like Cablevision feel Wi-Fi is necessary to retain the loyalty of their highly wired customer base.</p>]]></content:encoded>
      <pubDate>Thu, 15 May 2008 17:47:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/metro-scale wi-fi">metro-scale wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/large-city wi-fi network">large-city wi-fi network</category>
      <category domain="http://securityratty.com/tag/wi-fi providers">wi-fi providers</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/york wi-fi plan">york wi-fi plan</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/city dollars">city dollars</category>
      <category domain="http://securityratty.com/tag/super-fast wi-fi network">super-fast wi-fi network</category>
      <source url="http://wifinetnews.com/archives/008322.html">MetroFi Plans Market Exit: Sale or Shutter</source>
    </item>
    <item>
      <title><![CDATA[Yahoo! Boosts Search Security with McAfee Partnership]]></title>
      <link>http://securityratty.com/article/9cd1f1f291e0201ccd01ce864149707c</link>
      <guid>http://securityratty.com/article/9cd1f1f291e0201ccd01ce864149707c</guid>
      <description><![CDATA[Just as Microsoft is walking away from a deal with Yahoo!, the search engine is announcing plans to make its services more secure by using McAfee technology. Red warning messages may soon start...]]></description>
      <content:encoded><![CDATA[<p>Just as Microsoft is walking away from a deal with Yahoo!, the search engine is announcing plans to make its services more secure by using McAfee technology. Red warning messages may soon start showing up next to questionable or dangerous site links in a yahoo search. Apparently, Google started this over a year ago in February 2007.</p>
<p>Another interesting factoid from the <a rel="nofollow" target="_blank" href="http://www.informationweek.com/news/security/app_security/showArticle.jhtml?articleID=207502061">original article</a>:</p>
<blockquote><p>
Citing a March 2008 survey conducted by marketing research services provider Decipher, Yahoo and McAfee claim that 65% of Americans online are more worried about clicking unsecured search listings than the threat of neighborhood crime, getting one&#8217;s wallet stolen, or e-mail scams. Unfortunately, Decipher hasn&#8217;t posted this survey online, making it harder to divine why so many people supposedly prefer being pistol-whipped and robbed to a malware infection.
</p></blockquote>
<p>Being as I live in Oakland, California, an area known for serious crime, I think those results are pretty funny. I don&#8217;t worry so much about malware (maybe it&#8217;s just cuz I have a Mac), but I do worry about getting mugged&#8211;though I never have. But maybe the people surveyed were from safe, suburban and rural towns, living in cozy sprawling homes where they keep their front doors unlocked. </p>
<p>Maybe now when they tuck their kids in at night, they&#8217;ll feel a bit safer when they go downstairs and look stuff up online.</p>]]></content:encoded>
      <pubDate>Wed, 07 May 2008 06:21:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/yahoo">yahoo</category>
      <category domain="http://securityratty.com/tag/americans online">americans online</category>
      <category domain="http://securityratty.com/tag/online">online</category>
      <category domain="http://securityratty.com/tag/survey online">survey online</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/people supposedly prefer">people supposedly prefer</category>
      <category domain="http://securityratty.com/tag/neighborhood crime">neighborhood crime</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/crime">crime</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/285567948/">Yahoo! Boosts Search Security with McAfee Partnership</source>
    </item>
    <item>
      <title><![CDATA[Public safety spectrum, rural broadband grab spotlight]]></title>
      <link>http://securityratty.com/article/7ccc41a65d450af10131bae92ec0182a</link>
      <guid>http://securityratty.com/article/7ccc41a65d450af10131bae92ec0182a</guid>
      <description><![CDATA[Speakers at the Wireless Communications Association meeting in Washington, D.C., this week threw out a flurry of suggestions to improve both public and private broadband access in the United States,...]]></description>
      <content:encoded><![CDATA[Speakers at the Wireless Communications Association meeting in Washington, D.C., this week threw out a flurry of suggestions to improve both public and private broadband access in the United States, from public investment to holding new spectrum auctions to allowing unlicensed use of TV “white spaces.”]]></content:encoded>
      <pubDate>Wed, 23 Apr 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/public">public</category>
      <category domain="http://securityratty.com/tag/tv white spaces">tv white spaces</category>
      <category domain="http://securityratty.com/tag/public investment">public investment</category>
      <category domain="http://securityratty.com/tag/wireless communications association">wireless communications association</category>
      <category domain="http://securityratty.com/tag/spectrum auctions">spectrum auctions</category>
      <category domain="http://securityratty.com/tag/broadband access">broadband access</category>
      <category domain="http://securityratty.com/tag/improve">improve</category>
      <category domain="http://securityratty.com/tag/suggestions">suggestions</category>
      <category domain="http://securityratty.com/tag/flurry">flurry</category>
      <source url="http://www.networkworld.com/news/2008/042408-wca.html?fsrc=rss-security">Public safety spectrum, rural broadband grab spotlight</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Topless Meetings; Projects-Fi; Boston Launch; Rural-Fi; Chrysler-Fi; Wi-Fi Chip-Fi]]></title>
      <link>http://securityratty.com/article/2cf6893a95bd49d4a43a00deeaa5a76f</link>
      <guid>http://securityratty.com/article/2cf6893a95bd49d4a43a00deeaa5a76f</guid>
      <description><![CDATA[No laptops allowed: So-called topless (nice sexy term for &quot;laptop-less&quot;) meetings are coming into vogue? It's hard to tell if it's a trend, but to judge by conferences I've attended, no one pays...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.sltrib.com/ci_8753164"><strong>No laptops allowed:</strong></a> So-called topless (nice sexy term for "laptop-less") meetings are coming into vogue? It's hard to tell if it's a trend, but to judge by conferences I've attended, no one pays attention to anything any more. Banning laptops might be an advantage to promoting shorter meetings--people will be jonesing so hard for their 'top that they'll cut to the chase.</p>

<p><a href="http://bits.blogs.nytimes.com/2008/03/28/low-income-residents-get-high-speed-access/%23more-1022"><strong>Internet Archive offers fiber-based service to public housing project:</strong></a> Forget Wi-Fi. How about 100 Mbps to each apartment in a 260-unit project (Valencia Gardens)? That's Brewster Kahle, Internet pioneer and all-around good guy, written large. His efforts intend to put high-speed service into 2,500 units, mostly by the end of the year. The project ties into city-owned fiber, and is routed through the archive's high-speed NOC. With this project and <a href="http://wifinetnews.com/archives/008108.html"><strong>the Meraki Free the Net mesh effort</strong></a>, San Francisco could move out of the status of a developing nation in terms of widespread broadband access.</p>

<p><a href="http://openairboston.net/pilot/index.html"><strong>Boston Wi-Fi project launches:</strong></a> The first pilot project under the direction of Openairboston launched today, with a square mile in Roxbury and Dorchester, passing about 8,000 homes. Service is free for 30 days, then $10 per month thereafter.</p>

<p><a href="http://gigaom.com/2008/03/28/broadband-in-the-boonies-gets-a-boost-new-service-coming/"><strong>Open Range Communications gets $267m loan for rural broadband:</strong></a> The funds are intended to push service into an extraordinary 518 rural areas across 17 states. They've raised $100m privately, too, GigaOm reports. They won't deploy just one set of technology, but will sublet spectrum and use a satellite range for ground service, Om Malik writes.</p>

<p><a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/03/19/AR2008031903447.html"><strong>Chrysler will put Wi-Fi into cars:</strong></a> Bloomberg News reports that Chrysler intends later this year to offer dealer-installed cellular Internet links in cars. The Chrysler chief for this effort misuses the term Wi-Fi, though, as it's cell data with car drivers required to obtain a cell subscription. The service will move to factory-installed after 2008. There's not much detail on what drivers and passengers will be able to use the service for in this brief article.</p>

<p><a href="http://www.businesswire.com/portal/site/google/?ndmViewId=news_view&amp;newsId=20080331005957&amp;newsLang=en"><strong>Wi-Fi chip shipments dectupled in five years; revenue quintupled:</strong></a> ABI Research notes that 440m Wi-Fi chipsets will ship in 2008, 10 times greater than in 2003. However, revenue is just 5 times higher, which shows how even with more advanced chips in the mix, the race to the bottom continues. Broadcom was the leading vendor in ABI's analysis.</p>]]></content:encoded>
      <pubDate>Mon, 31 Mar 2008 11:53:51 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/chrysler">chrysler</category>
      <category domain="http://securityratty.com/tag/440m wi-fi chipsets">440m wi-fi chipsets</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/ground service">ground service</category>
      <category domain="http://securityratty.com/tag/pilot project">pilot project</category>
      <category domain="http://securityratty.com/tag/project">project</category>
      <category domain="http://securityratty.com/tag/term wi-fi">term wi-fi</category>
      <category domain="http://securityratty.com/tag/push service">push service</category>
      <source url="http://wifinetnews.com/archives/008247.html">Wee-Fi: Topless Meetings; Projects-Fi; Boston Launch; Rural-Fi; Chrysler-Fi; Wi-Fi Chip-Fi</source>
    </item>
    <item>
      <title><![CDATA[Spending Money on the Wrong Security Threats]]></title>
      <link>http://securityratty.com/article/249facd9a3d2d7eb701466f2fb5a1ae4</link>
      <guid>http://securityratty.com/article/249facd9a3d2d7eb701466f2fb5a1ae4</guid>
      <description><![CDATA[This story is a year and a half old, but the lessons are still good: Kim Hyten, emergency management director in Putnam County, said he didn't realize homeland security grants can now be used to...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.wthr.com/Global/story.asp?S=4934988">This story</a> is a year and a half old, but the lessons are still good:</p>

<blockquote>Kim Hyten, emergency management director in Putnam County, said he didn't realize homeland security grants can now be used to prepare for tornados. As a result, Putnam County is using its grant money to prepare for something else.

<p>"Weapons of mass destruction," Hyten said.</p>

<p>That's right -- weapons of mass destruction. This year, Putnam County spent most of its $58,000 homeland security grant to buy dozens of gas masks, boxes full of chemical suits, a plutonium-detecting gamma and neutron rae radiological monitor and, for good measure, this rural county about fifty miles west of Indianapolis also ordered plenty of weapons of mass destruction test strips.</p>

<p>But asked whether weapons of mass destruction are a concern, Hyten replied: "The weapons of mass destruction -- I don't believe this county has ever, when we did our terrorism protection plan, ever looked at that we'd be a targeted site."</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=HXP2HcE"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=HXP2HcE" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=YCPCRtE"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=YCPCRtE" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 19 Feb 2008 04:18:32 +0000</pubDate>
      <category domain="http://securityratty.com/tag/putnam county">putnam county</category>
      <category domain="http://securityratty.com/tag/county">county</category>
      <category domain="http://securityratty.com/tag/mass destruction">mass destruction</category>
      <category domain="http://securityratty.com/tag/weapons">weapons</category>
      <category domain="http://securityratty.com/tag/terrorism protection plan">terrorism protection plan</category>
      <category domain="http://securityratty.com/tag/rural county">rural county</category>
      <category domain="http://securityratty.com/tag/emergency management director">emergency management director</category>
      <category domain="http://securityratty.com/tag/homeland security grant">homeland security grant</category>
      <category domain="http://securityratty.com/tag/fifty miles west">fifty miles west</category>
      <source url="http://www.schneier.com/blog/archives/2008/02/spending_money.html">Spending Money on the Wrong Security Threats</source>
    </item>
  </channel>
</rss>
