<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: safely]]></title>
    <link>http://securityratty.com/tag/safely</link>
    <description></description>
    <pubDate>Fri, 18 Jul 2008 07:04:34 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Tips for staying safe online this Holiday season]]></title>
      <link>http://securityratty.com/article/4601cb0e0df5f980983616dff3fecc59</link>
      <guid>http://securityratty.com/article/4601cb0e0df5f980983616dff3fecc59</guid>
      <description><![CDATA[Great article by Mr Walling. Take the time read the tips and maybe you wont become a statistic this season


clipped from www.marketwatch.com

Walling Datas Top Ten Safety Tips for Online Shopping


...]]></description>
      <content:encoded><![CDATA[<div > Great article by Mr Walling.<br/>Take the time read the tips and maybe you wont become a statistic this season </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/5CC9381E-01B3-4581-A29F-B6C7D9C85A8E/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/a9a2ac45-d36e-42ed-8102-6fd92fd5847c/5CC9381E-01B3-4581-A29F-B6C7D9C85A8E/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://www.marketwatch.com/news/story/Walling-Datas-Top-Ten-Safety/story.aspx?guid=%7B877022E1-B408-495D-A4F6-C49F6002D0AE%7D" href="http://www.marketwatch.com/news/story/Walling-Datas-Top-Ten-Safety/story.aspx?guid=%7B877022E1-B408-495D-A4F6-C49F6002D0AE%7D" style="font-size: 11px;">www.marketwatch.com</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.marketwatch.com/news/story/Walling-Datas-Top-Ten-Safety/story.aspx?guid=%7B877022E1-B408-495D-A4F6-C49F6002D0AE%7D -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">Walling Data&#8217;s Top Ten Safety Tips for Online Shopping</div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.marketwatch.com/news/story/Walling-Datas-Top-Ten-Safety/story.aspx?guid=%7B877022E1-B408-495D-A4F6-C49F6002D0AE%7D --><DIV class="p"><br />
            &#8220;The Internet is safe if you follow basic, fundamental rules of<br />
      using a computer safely,&#8221; says Luke Walling, Founder and President of Walling<br />
      Data, one of the largest distributors of online security products in<br />
      the country. &#8220;Many people think of their computer much like<br />
      they would an appliance, such as a microwave or stereo that behaves in a<br />
      predictable pre-programmed way. But, in reality computers<br />
      are dynamic devices that evolve dramatically with the installation of<br />
      each new program. It&#8217;s important to remember that viruses<br />
      and spyware are programs as well.&#8221;<br />
</DIV></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/5CC9381E-01B3-4581-A29F-B6C7D9C85A8E/blog/" title="blog or email this clip"><img src="http://content6.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
<BR/><MAP name="bdv_RSS_Ad_281108043701"><AREA alt="Feed Ads By BidVertiser.com" shape="poly" coords="0,0,467,0,467,45,315,45,315,59,0,59" href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=281108043701&amp;click=1" target="_blank" /><AREA alt="Feed Ads By BidVertiser.com" shape="rect" coords="315,45,467,59" href="http://www.bidvertiser.com/bdv/bidvertiser/bdv_ref.dbm?Ref_PID=165886&amp;Ref_Option=main&amp;source=90614506" target="_blank" /></MAP><P><a href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=281108043701&amp;click=1" target="_blank"><IMG src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=165886&amp;bid=400950&amp;PHS=281108043701&amp;rssimage=1&amp;rSRC=2" border="0" usemap="#bdv_RSS_Ad_281108043701" /></a></P>]]></content:encoded>
      <pubDate>Fri, 28 Nov 2008 13:37:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/online">online</category>
      <category domain="http://securityratty.com/tag/tips">tips</category>
      <category domain="http://securityratty.com/tag/online security products">online security products</category>
      <category domain="http://securityratty.com/tag/computer safely">computer safely</category>
      <category domain="http://securityratty.com/tag/safety tips">safety tips</category>
      <category domain="http://securityratty.com/tag/computer">computer</category>
      <category domain="http://securityratty.com/tag/dynamic devices">dynamic devices</category>
      <category domain="http://securityratty.com/tag/datas top">datas top</category>
      <category domain="http://securityratty.com/tag/safe">safe</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=665">Tips for staying safe online this Holiday season</source>
    </item>
    <item>
      <title><![CDATA[Arkansas Couple Sues McDonalds for Using Private Nude Photos in Online Ads]]></title>
      <link>http://securityratty.com/article/51fc8263d6d9f3cfbdbd51da0e6e8237</link>
      <guid>http://securityratty.com/article/51fc8263d6d9f3cfbdbd51da0e6e8237</guid>
      <description><![CDATA[When an Arkansas couple visited a local McDonalds in June, they got more than just their favorite burger. The couple apparently left their cell phone at the store, and even though it was returned,...]]></description>
      <content:encoded><![CDATA[<p>When an Arkansas couple visited a local McDonald&#8217;s in June, they got more than just their favorite burger. The couple apparently left their cell phone at the store, and even though it was returned, their personal information had already been compromised&#8211;and put online along with nude photos:</p>
<blockquote><p>Staff promised to keep the phone safely until [the couple came to retrieve it].</p>
<p>However, after Philip Sherman retrieved the phone, his wife began receiving threatening calls and messages from strangers. This caused the Shermans’ to become suspicious about what had occurred with the phone.</p>
<p>Soon afterward the Shermans’ found the private photos that Tina Sherman had sent to her husband’s phone published on the Internet along with their names, address, and phone numbers. Pictures of Tina Sherman were altered to contain McDonald’s franchise logos, along with slogans such as, “I’m lovin’ it,” and “Hot as McDonald’s coffee.” The photos were located on several different sites online, but have since been removed.</p></blockquote>
<p>The Shermans are suing for over 3 million dollars in damages, along with relocation costs.</p>
<p>Read the <a rel="nofollow" target="_blank" href="http://www.ecanadanow.com/news/curiosity/couple-to-sue-mcdonalds-after-racy-photo-stolen-20081125.html">full article</a> here.</p>]]></content:encoded>
      <pubDate>Tue, 25 Nov 2008 09:38:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/arkansas couple">arkansas couple</category>
      <category domain="http://securityratty.com/tag/couple">couple</category>
      <category domain="http://securityratty.com/tag/cell phone">cell phone</category>
      <category domain="http://securityratty.com/tag/phone">phone</category>
      <category domain="http://securityratty.com/tag/nude photos">nude photos</category>
      <category domain="http://securityratty.com/tag/photos">photos</category>
      <category domain="http://securityratty.com/tag/phone safely">phone safely</category>
      <category domain="http://securityratty.com/tag/online">online</category>
      <category domain="http://securityratty.com/tag/husbands phone">husbands phone</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/465465087/">Arkansas Couple Sues McDonalds for Using Private Nude Photos in Online Ads</source>
    </item>
    <item>
      <title><![CDATA[British Hospital System Hit by Computer Virus]]></title>
      <link>http://securityratty.com/article/f1d8bd877d349859de699cde8caa6ac4</link>
      <guid>http://securityratty.com/article/f1d8bd877d349859de699cde8caa6ac4</guid>
      <description><![CDATA[Three London hospitals that make up St Bartholomew's (Barts) and The London NHS Trust have been forced to shut down their computer systems for at least 24 hours due to a computer virus attack . The...]]></description>
      <content:encoded><![CDATA[Three London hospitals that make up St Bartholomew's (Barts) and The London NHS Trust <a href="http://news.bbc.co.uk/2/hi/uk_news/england/london/7735502.stm">have been forced to shut down their computer systems for at least 24 hours due to a computer virus attack</a>. The three hospitals are Barts in the City, the Royal London Hospital in Whitechapel and The London Chest Hospital in Bethnal Green.

Neither a BBC report nor <a href="http://www.bartsandthelondon.org.uk/formedia/press/release.asp?id=2054&sid=10">a press release from the hospitals</a> said anything about the nature of the attack or the extent of the damage or if patient services were affected, although one would think this would have to be the case. The terse press release says that "The Trust's well rehearsed emergency procedures have been activated to ensure that key clinical systems continue safely while the system is being stabilised and a solution is being found."

The problem was first detected at 12:00 GMT Monday according to a spokesman.
<p><a href="http://feedads.googleadservices.com/~a/5O7UI8F7mHF--xx0jjKhwICpCgo/a"><img src="http://feedads.googleadservices.com/~a/5O7UI8F7mHF--xx0jjKhwICpCgo/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/RSS/cheap_hack/~4/OssPZ1W7pOw" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 18 Nov 2008 06:01:25 +0000</pubDate>
      <category domain="http://securityratty.com/tag/press release">press release</category>
      <category domain="http://securityratty.com/tag/terse press release">terse press release</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/trust">trust</category>
      <category domain="http://securityratty.com/tag/london hospitals">london hospitals</category>
      <category domain="http://securityratty.com/tag/computer virus attack">computer virus attack</category>
      <category domain="http://securityratty.com/tag/hospitals">hospitals</category>
      <category domain="http://securityratty.com/tag/london nhs trust">london nhs trust</category>
      <category domain="http://securityratty.com/tag/royal london hospital">royal london hospital</category>
      <source url="http://feeds.ziffdavisenterprise.com/~r/RSS/cheap_hack/~3/OssPZ1W7pOw/british_hospital_system_hit_by_computer_virus.html">British Hospital System Hit by Computer Virus</source>
    </item>
    <item>
      <title><![CDATA[Securing Home Office]]></title>
      <link>http://securityratty.com/article/7930a3438844ea5e3997375506f2ad0c</link>
      <guid>http://securityratty.com/article/7930a3438844ea5e3997375506f2ad0c</guid>
      <description><![CDATA[The goal of this paper, written by Matt Moberg, is to address the common vulnerabilities of the average home office and to suggest methods to safely secure...]]></description>
      <content:encoded><![CDATA[The goal of this paper, written by Matt Moberg, is to address the common vulnerabilities of the average home office and to suggest methods to safely secure it.]]></content:encoded>
      <pubDate>Mon, 27 Oct 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/average home office">average home office</category>
      <category domain="http://securityratty.com/tag/matt moberg">matt moberg</category>
      <category domain="http://securityratty.com/tag/common vulnerabilities">common vulnerabilities</category>
      <category domain="http://securityratty.com/tag/safely secure">safely secure</category>
      <category domain="http://securityratty.com/tag/goal">goal</category>
      <category domain="http://securityratty.com/tag/methods">methods</category>
      <category domain="http://securityratty.com/tag/address">address</category>
      <category domain="http://securityratty.com/tag/paper">paper</category>
      <source url="http://www.infosecwriters.com/texts.php?op=display&amp;id=637">Securing Home Office</source>
    </item>
    <item>
      <title><![CDATA[Friday Squid Blogging: The Mystery of Humbolt Squid Beaks]]></title>
      <link>http://securityratty.com/article/eb769ebd958d625341934c0b162971d7</link>
      <guid>http://securityratty.com/article/eb769ebd958d625341934c0b162971d7</guid>
      <description><![CDATA[They're sharp : There are many weird things about the giant Humboldt squid, but here's one of the strangest: Its beak. The squid's beak is one of the hardest organic substances in existence -- such...]]></description>
      <content:encoded><![CDATA[<p>They're <a href="http://www.collisiondetection.net/mt/archives/2008/09/there_are_many.php">sharp</a>:</p>

<blockquote>There are many weird things about the giant Humboldt squid, but here's one of the strangest: Its beak. The squid's beak is one of the hardest organic substances in existence -- such that the sharp point can slice through a fish or whale like a Ginsu knife. Yet the beak is attached to squid flesh that itself is the texture of jello. How precisely does a gelatinous animal safely wield such a razor-sharp weapon? Why doesn't it just sort of, y'know, <i>rip off</i>? It's as if you tried to carve a roast with a knife that doesn't have a handle: It would cut into your fingers as much as the roast.</blockquote>

<p>Paper <a href="http://www.materials.ucsb.edu/~zok/PDF/TransitionMiserez.pdf">here</a>.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=qymqL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=qymqL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=AJH2L"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=AJH2L" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 12 Sep 2008 12:59:55 +0000</pubDate>
      <category domain="http://securityratty.com/tag/squid">squid</category>
      <category domain="http://securityratty.com/tag/giant humboldt squid">giant humboldt squid</category>
      <category domain="http://securityratty.com/tag/sharp">sharp</category>
      <category domain="http://securityratty.com/tag/razor-sharp weapon">razor-sharp weapon</category>
      <category domain="http://securityratty.com/tag/ginsu knife">ginsu knife</category>
      <category domain="http://securityratty.com/tag/beak">beak</category>
      <category domain="http://securityratty.com/tag/squid flesh">squid flesh</category>
      <category domain="http://securityratty.com/tag/knife">knife</category>
      <category domain="http://securityratty.com/tag/roast">roast</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/friday_squid_bl_142.html">Friday Squid Blogging: The Mystery of Humbolt Squid Beaks</source>
    </item>
    <item>
      <title><![CDATA[Google's New Browser]]></title>
      <link>http://securityratty.com/article/ad7dafb059c5f7fab0dc5f23e779270c</link>
      <guid>http://securityratty.com/article/ad7dafb059c5f7fab0dc5f23e779270c</guid>
      <description><![CDATA[So, Google have released a new browser called Chrome

What does that mean from an Information Security perspective

Not very much and a lot, depending if you are looking at the short term or long...]]></description>
      <content:encoded><![CDATA[So, Google have released a new browser called Chrome...<br /><br />What does that mean from an Information Security perspective?<br /><br />Not very much and a lot, depending if you are looking at the short term or long term.<br /><br />So, lets get into the short term - there is a new browser. It will have bugs and vulnerabilities. These will be exploited.<br /><br />Most of the browser is based on webkit which is sorta what kde uses and sorta what safari uses and sorta what a number of cell phones use. It is becoming browser number 4 after IE, mozilla/firefox and opera. This means that hackers (online criminals) will start to notice the browser (if they haven't already). Assuming that the open source promise (many eyes make fewer bugs) stands true and that Google will be quick with patches then this is merely part of the daily application vulnerability race. And if Google is quick with paches then this browser should not be any more unsafe than the others.<br /><br />There are a few extra security features in this browser - that is always a good thing. For more information read <a href="http://www.tssci-security.com/archives/2008/09/02/google-chrome-first-look/">here</a>. Of course the feature that is most interesting - "each-tab-running-separately" has been compromised.<br /><br />So short term - move along, nothing to see here. Lets move on to the long term...<br /><br />What is most important in my mind for the long term is the "why" of this browser - why would Google want to jump into a market where they can't be the biggest or the best or even a very effective niche player? Especially since they have a good relationship with Firefox and their product is almost entirely webkit? And their browser is essentially all open source so all the good bits will be analysed and added to Firefox anyhow or improved upon and added to Firefox.<br /><br />The answer is simple - Google want their browser to fail.<br /><br />Huh?<br /><br />Well, that may a bit unfair but they really don't care either way.<br /><br />Google is the search engine leader. They are also slowly <span style="font-style: italic;">becoming</span> the Internet. This blog is hosted by Google, its feed is hosted by Google. If I need to host video, pictures, sound etc then I would probably choose Google - they are really good at hosting and why bother looking elsewhere when I already have a Google account?<br /><br />So, almost all of my public information is hosted by Google. What about my private information?<br /><br />Well... no.<br /><br />That is all stored safely on my laptop for four reasons -<br /><br /><ol><li>I don't trust Google.</li><li>I don't trust the Internet.</li><li>The tools for creating private documents are so much better than the online ones.</li><li>I can get to my documents when I am offline.</li><li>The Internet is too slow. </li></ol><br />But a lot of my computer day is spent in Microsoft Office. That is a lot of advertising opportunity lost. And if Google can access my personal files then they will have a better idea of what adverts to send my way. Which in turn will make their advertisers happier and Google stock go up.<br /><br />And all it would take is sorting out the above 5 points.<br /><br />I was going to go into each one but this post is already getting quite long. Just note that the three features that are most important in Chrome are:<br /><br /><ul><li>Security and stability</li><li>Offline application mode</li><li>Fast running and standards based application engine</li></ul>In other words - helping making it easier to use Google's online applications. Most of the factors are going to be taken care of with Chrome and its kids.<br /><br />What will happen is that Firefox will catch up with Chrome but Google won't care what you use to access their online applications - just as long as you access them. And that is their game plan.<br /><br />What this leaves is the final question - all things being equal - is your information more at risk on Google's servers or on you laptop at home?<br /><br />That is a good question but one we should be looking at.<img src="http://feeds.feedburner.com/~r/SecurityThoughts/~4/388678608" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 06:59:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/trust">trust</category>
      <category domain="http://securityratty.com/tag/trust google">trust google</category>
      <category domain="http://securityratty.com/tag/browser">browser</category>
      <category domain="http://securityratty.com/tag/google account">google account</category>
      <category domain="http://securityratty.com/tag/google stock">google stock</category>
      <category domain="http://securityratty.com/tag/choose google">choose google</category>
      <category domain="http://securityratty.com/tag/information security perspective">information security perspective</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <source url="http://feeds.feedburner.com/~r/SecurityThoughts/~3/388678608/googles-new-browser.html">Google's New Browser</source>
    </item>
    <item>
      <title><![CDATA[Safely providing anywhere, anytime network access]]></title>
      <link>http://securityratty.com/article/171ed5feba667c18affc04e17cf43723</link>
      <guid>http://securityratty.com/article/171ed5feba667c18affc04e17cf43723</guid>
      <description><![CDATA[Today's business user often needs remote access to email, documents, or other business information, even when a business supplied laptop or desktop is available. This need for secure anytime, anywhere...]]></description>
      <content:encoded><![CDATA[Today's business user often needs remote access to email, documents, or other business information, even when a business supplied laptop or desktop is available.  This need for secure anytime, anywhere access to business information comes with its own complete set of challenges.  But reasonably priced and user-friendly solutions are emerging.]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 01:26:33 +0000</pubDate>
      <category domain="http://securityratty.com/tag/business information">business information</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/access">access</category>
      <category domain="http://securityratty.com/tag/business user">business user</category>
      <category domain="http://securityratty.com/tag/remote access">remote access</category>
      <category domain="http://securityratty.com/tag/complete set">complete set</category>
      <category domain="http://securityratty.com/tag/user-friendly solutions">user-friendly solutions</category>
      <category domain="http://securityratty.com/tag/secure anytime">secure anytime</category>
      <category domain="http://securityratty.com/tag/laptop">laptop</category>
      <source url="http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecurity/safely-providing-anywhere-anytime-network-access-26949">Safely providing anywhere, anytime network access</source>
    </item>
    <item>
      <title><![CDATA[Amber Alerts As Security Theater]]></title>
      <link>http://securityratty.com/article/0d6125e22aa5c6863e853fa8ae428cf9</link>
      <guid>http://securityratty.com/article/0d6125e22aa5c6863e853fa8ae428cf9</guid>
      <description><![CDATA[Interesting analysis : Since its birth 12 years ago after a fatal kidnapping in Texas, Amber Alert has quickly become one of the best-known tools in the national law enforcement arsenal. The warnings...]]></description>
      <content:encoded><![CDATA[<p>Interesting <a href="http://www.boston.com/bostonglobe/ideas/articles/2008/07/20/abducted/">analysis</a>:</p>

<blockquote>Since its birth 12 years ago after a fatal kidnapping in Texas, Amber Alert has quickly become one of the best-known tools in the national law enforcement arsenal. The warnings are familiar to anyone who watches cable TV news, especially during the summer, when the drumbeat of abduction stories seems to increase. Last year, 227 alerts were issued nationwide, each galvanizing interest in the local community and flooding police with tips. While the particulars of the state systems differ, the goal is the same: to disperse news of a kidnapping as widely and quickly as possible, in the hope that someone will spot the kidnapper before a child is harmed.

<p>The program's champions say that its successes have been dramatic. According to the National Center for Missing and Exploited Children, more than 400 children have been saved by Amber Alerts. Of the 17 children Massachusetts has issued alerts on since it created its system in 2003, all have been safely returned.</p>

<p>These are encouraging statistics -- but also deeply misleading, according to some of the only outside scholars to examine the system in depth. In the first independent study of whether Amber Alerts work, a team led by University of Nevada criminologist Timothy Griffin looked at hundreds of abduction cases between 2003 and 2006 and found that Amber Alerts -- for all their urgency and drama -- actually accomplish little. In most cases where they were issued, Griffin found, Amber Alerts played no role in the eventual return of abducted children. Their successes were generally in child custody fights that didn't pose a risk to the child. And in those rare instances where kidnappers did intend to rape or kill the child, Amber Alerts usually failed to save lives.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=rZkbpK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=rZkbpK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=e2lugK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=e2lugK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 03:59:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/alerts">alerts</category>
      <category domain="http://securityratty.com/tag/amber alerts">amber alerts</category>
      <category domain="http://securityratty.com/tag/child custody fights">child custody fights</category>
      <category domain="http://securityratty.com/tag/child">child</category>
      <category domain="http://securityratty.com/tag/abduction">abduction</category>
      <category domain="http://securityratty.com/tag/abduction stories">abduction stories</category>
      <category domain="http://securityratty.com/tag/successes">successes</category>
      <category domain="http://securityratty.com/tag/team led">team led</category>
      <category domain="http://securityratty.com/tag/local community">local community</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/amber_alerts_as.html">Amber Alerts As Security Theater</source>
    </item>
    <item>
      <title><![CDATA[Eight Steps to Responsible Surfing]]></title>
      <link>http://securityratty.com/article/a72ad36f246a9ff490930a87868f7ede</link>
      <guid>http://securityratty.com/article/a72ad36f246a9ff490930a87868f7ede</guid>
      <description><![CDATA[Web threats and attacks will continue to evolve, but surfers can protect themselves against the majority of malicious code by following eight different steps. To provide the greatest degree of...]]></description>
      <content:encoded><![CDATA[<div><strong></strong>Web threats and attacks will continue to evolve, but surfers can protect themselves against the majority of malicious code by following eight different steps. To provide the greatest degree of security, surfers cannot rely entirely on technology, and should also address the behavioral issues that are most likely to create risky situations.</div>
<p><strong>Changing Behavior</strong></p>
<div>The safest way to deal with a danger is avoidance. By surfing safely and adapting offline sensibilities online, surfers can greatly reduce their danger of exposure to malware.</div>
<p><strong>1. Educate yourself.</strong><br />
At least every 6 to 12 months, surfers should browse the educational information provided by their operating system and security vendors and subscribe to any security-related newsletters they might offer. According to David Perry, familiarity with the latest threats, dangers, and recommended safety tips will allow surfers to make safe choices. &#8220;Until you know what&#8217;s out there, you&#8217;re just flying blind. Without an education, you&#8217;re wide open&#8221;.<br />
<strong>2. Avoid suspect sites.</strong><br />
While criminals can infect even mainstream Web sites, sites such as gambling sites, adult Internet sites, and illegal file-sharing sites are far more likely to carry malicious code. Web sites that offer &#8220;something for nothing&#8221; frequently recoup their losses by infecting visitors&#8217; PCs.<br />
<strong>3. Lose Your Comfort Zone.</strong></p>
<div>Web surfers should migrate their offline precautions to their online experience. By beginning with an attitude of healthy skepticism and only doing business with trusted Web sites, surfers can bypass a good deal of risk.</div>
<p><strong>Recommended Technology</strong></p>
<div>Despite the best precautions, every user will encounter Web-based malware. While no technology can guarantee protection against all attacks, a combination of preventive technologies provides the most comprehensive protection possible.</div>
<p><strong>4. Use an updated virus scanning suite.</strong><br />
The most important component of any threat mitigation system is a virus scanning suite. In addition to detecting and removing known viruses and malware, modern virus scanning suites provide additional protections against new attacks by disabling their known protocols. For example, Trend Micro™ Internet Security encrypts keyboard traffic, protecting personal data from keyboard logging programs that might go unnoticed. Users should update their scanner and virus definitions as frequently as possible to ensure the best possible coverage.<br />
<strong>5. Upgrade your OS and browser.</strong><br />
In addition to offering more features, Microsoft&#8217;s Internet Explorer version 7 and the latest Mozilla Firefox are both substantially more secure than previous-generation browsers. Users of older browsers should upgrade immediately to take advantage of increased security. Similarly, Windows Vista and Mac OS X are more secure than their predecessors, and users of older operating systems should consider upgrading, as well.<br />
<strong>6. Disable scripting and &#8220;widgets.&#8221;</strong><br />
Many Web-based attacks use various scripting languages to run infectious programs in a browser or use downloadable &#8220;widgets&#8221; to execute infections locally. By disabling scripting and avoiding downloadable widgets wherever possible, surfers disable these common attack vectors.<br />
<strong>7. Rate your Web pages.</strong><br />
Some available services rate the risk of Web pages in search results, allowing surfers to avoid unwanted content and hidden threats before viewing the pages. Rating applications (e.g., Trend Micro TrendProtect™) consume few system resources and run unobtrusively, so they are suitable for any Web-enabled personal computer.<br />
<strong>8. Ask your provider.</strong><br />
Commerce companies, banks, and credit card associations are all interested in computer security, and many offer additional features. For example, Visa&#8217;s Verified By Visa program requires cardholders to enter a second password to identify themselves during a transaction, while businesses in Poland require cell-phone confirmation of credit card purchases. While nothing will be 100 percent effective, any additional security measure provided by a trusted source will increase protection, and surfers should adopt as many as possible.</p>
<p>This article provided for your reading pleasure by Trend Micro.</p>
]]></content:encoded>
      <pubDate>Wed, 06 Aug 2008 20:30:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mainstream web sites">mainstream web sites</category>
      <category domain="http://securityratty.com/tag/sites">sites</category>
      <category domain="http://securityratty.com/tag/adult internet sites">adult internet sites</category>
      <category domain="http://securityratty.com/tag/web sites">web sites</category>
      <category domain="http://securityratty.com/tag/web surfers">web surfers</category>
      <category domain="http://securityratty.com/tag/surfers">surfers</category>
      <category domain="http://securityratty.com/tag/surfers disable">surfers disable</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/computer security">computer security</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=536">Eight Steps to Responsible Surfing</source>
    </item>
    <item>
      <title><![CDATA[The Network Firewall is a Consensual Hallucination]]></title>
      <link>http://securityratty.com/article/c05f6f72f82ab4c25ddc9c804d1973ec</link>
      <guid>http://securityratty.com/article/c05f6f72f82ab4c25ddc9c804d1973ec</guid>
      <description><![CDATA[James McGovern asks why we don't see enterprisey folks focusing on SOA *and* security? Well there are a lot of reasons here, but lets look at some facts. Most enterprisey folks look at security in...]]></description>
      <content:encoded><![CDATA[<p>James McGovern <a href="http://duckdown.blogspot.com/2008/07/how-come-enterprise-architects-are.html">asks</a> why we don't see enterprisey folks focusing on SOA *and* security? Well there are a lot of reasons here, but lets look at some facts. Most enterprisey folks look at security in binary terms - inside the firewall or outside the firewall. When a transaction is "inside the firewall" they can do silly things like load all their transaction on to something like MQ Series with no authentication, send it to the mainframe which runs their entire book of business, and in essence run their transactional backbone on anonymous ftp. Because its "inside the firewall"</p><br><div>Problem is - its just a Visio drawing, its not reality, its historical baggage. We were trained to think about things in these terms in the 90s</div><br><div><a style="display: inline;" href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553a923008833-pi"><img  class="at-xid-6a00d83451c75869e200e553a923008833 selected " alt="Goodstuffbadstuff" src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553a923008833-320pi" title="Goodstuffbadstuff"></a>
<br></div><br><div>But the business and software worlds have changed a bit from the early 90s, even if security tooling hasn't</div><br>
<p><br>
<a href="http://1raindrop.typepad.com/photos/uncategorized/2008/05/19/innovatecompare_2.png"><img  alt="Innovatecompare_2" title="Innovatecompare_2" src="http://1raindrop.typepad.com/1_raindrop/images/2008/05/19/innovatecompare_2.png" width="300" height="167" border="0"></a></p>
<div>If you sent an alien from outer space to observe what an enterprise looks like today, and asked that alien to file an objective report as to the actual connections and message exchanges it wouldn't look like the idyllic, clear separation of good stuff from bad stuff, it would look like this</div><br><br><p><a href="http://1raindrop.typepad.com/photos/uncategorized/thenetwork.jpg"><img  class="image-full " alt="Thenetwork" title="Thenetwork" src="http://1raindrop.typepad.com/photos/uncategorized/thenetwork.jpg" border="0"></a></p><br><div>There is no firewall in any meaningful sense, there are links, federations, communities of interest, business units, integration points, outsourcing arrangements, business processes. In short, there is information and commerce in all its messy vitality. </div><br><div>Inside the firewall and outside the firewall is not a security architecture, its historical <a href="http://en.wikipedia.org/wiki/Cruft">cruft</a> a Victorian, industrial age artifact that snuck into your Visio, not something that protects your businesses' applications and data.</div><br><div>If you want to let the world access your maifnrame, SAP, Siebel, or whatever so they can buy things from you, that is probably a really good idea. But don't assume that RACF or what have you came down on stone tablets from Moses. Just because your transaction is "inside the firewall" doesnt mean that your security model can only focus on resources and objects in isolation. It has to focus on how your business just broke everything apart and then re-connected everything. The subjects are different, the sessions are different, and the transactions are different. Just because the objects and resources are the same and are "inside the firewall" means little when all the context and all the relationships are different.</div><br><div>The world is not firewalled, its federated. Just because its convenient for enterprisey folks to buy into the same hallucination doesn't make it reality.</div><br><div>Next week, I am speaking at <a href="http://www.ssosummit.com/program/Agenda-at-a-Glance.cfm">Ping's SSO Summit</a> on Web Services SSO basically everything that happens after you press <span style="font-family: Arial; line-height: normal; ">"SUBMIT" on a website. Your data has a journey as dangerous as Frodo Baggins' travels through Mordor. The talk traces the path from the website through the perils that lurk in the enterprise and legacy systems, we will look at ways to get Frodo and Sam home safely and we won't rely on Visio firewalls where Mithril is required.</span></div><div><span><br></span></div><div><span><a style="display: inline;" href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553c410e98834-pi"><img  class="at-xid-6a00d83451c75869e200e553c410e98834 " alt="Ghostseparationwall" src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553c410e98834-320wi"></a>
<br></span></div><br><div>(Note - Thanks for reminding me of the analogy <a href="http://radar.oreilly.com/jims/">Jim</a>)</div>]]></content:encoded>
      <pubDate>Fri, 18 Jul 2008 07:04:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/firewall">firewall</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security model">security model</category>
      <category domain="http://securityratty.com/tag/business units">business units</category>
      <category domain="http://securityratty.com/tag/inside">inside</category>
      <category domain="http://securityratty.com/tag/enterprisey folks">enterprisey folks</category>
      <category domain="http://securityratty.com/tag/security architecture">security architecture</category>
      <category domain="http://securityratty.com/tag/business processes">business processes</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/07/the-network-firewall-is-a-consensual-hallucination.html">The Network Firewall is a Consensual Hallucination</source>
    </item>
  </channel>
</rss>
