<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: shops]]></title>
    <link>http://securityratty.com/tag/shops</link>
    <description></description>
    <pubDate>Tue, 17 Jun 2008 13:57:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Microsoft reveals critical holes in Active Directory, mainframe gateway]]></title>
      <link>http://securityratty.com/article/73cd472dd661a201aef436c7d0094b79</link>
      <guid>http://securityratty.com/article/73cd472dd661a201aef436c7d0094b79</guid>
      <description><![CDATA[It's the mother of all patch days for enterprise IT shops, with both Microsoft and Oracle releasing critical software updates...]]></description>
      <content:encoded><![CDATA[It's the mother of all patch days for enterprise IT shops, with both Microsoft and Oracle releasing critical software updates Tuesday.]]></content:encoded>
      <pubDate>Mon, 13 Oct 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/patch days">patch days</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/critical software">critical software</category>
      <category domain="http://securityratty.com/tag/enterprise">enterprise</category>
      <category domain="http://securityratty.com/tag/mother">mother</category>
      <category domain="http://securityratty.com/tag/tuesday">tuesday</category>
      <category domain="http://securityratty.com/tag/oracle">oracle</category>
      <category domain="http://securityratty.com/tag/shops">shops</category>
      <source url="http://www.networkworld.com/news/2008/101408-security-the-focus-as-microsoft.html?fsrc=rss-security">Microsoft reveals critical holes in Active Directory, mainframe gateway</source>
    </item>
    <item>
      <title><![CDATA[When the security watchdog is the underdog]]></title>
      <link>http://securityratty.com/article/deea472f06b327b78ee4289e81e9de94</link>
      <guid>http://securityratty.com/article/deea472f06b327b78ee4289e81e9de94</guid>
      <description><![CDATA[Many of the biggest challenges security shops face have nothing to do with the bad guys. Here's how to manage when the deck is stacked against...]]></description>
      <content:encoded><![CDATA[Many of the biggest challenges security shops face have nothing to do with the bad guys. Here's how to manage when the deck is stacked against you.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:9d7be0ef7f01d26e1c0afdae5cfda042:ZTQkTNg5mDGzhGnfKsQivcjDEreYobM8vgTtNXDz8XV3bmda%2FHa8siUm2nWRd925Oqp1Nu2WbDm8'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:35b4fc6ee55f710b32fd7eebc985a5ab:i0QhR48LlFGbF%2BjoT%2Fpc6P5Ww%2F%2BTtbhnhqLkjX7fFfSTEr195Xl44U0bmA8k47ysIc7s2TsdDXTM3g%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:761574497d47244a2ada4f481f16a6bc:PIa2DkDZlw5E6eUlKJgh7h2ubdEC087qA%2BcGgNtZOMB8yoIQut0RuGjjTbLnKVutosFuJjzLvWHUNw%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:f0dbc204bb85171f34669e15ca68a011:aCw7QoiisI4JLNjzZTuD6YKzfHXiCBFbPG0gxwIKfhdn6eG8lx2VPxbHQxPMEYoSumfktN6kx7usqA%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=9ffd84aef55b02ad2892dd65003eddff" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=9ffd84aef55b02ad2892dd65003eddff" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Mon, 13 Oct 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/challenges security shops">challenges security shops</category>
      <category domain="http://securityratty.com/tag/bad guys">bad guys</category>
      <category domain="http://securityratty.com/tag/deck">deck</category>
      <category domain="http://securityratty.com/tag/manage">manage</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=9ffd84aef55b02ad2892dd65003eddff">When the security watchdog is the underdog</source>
    </item>
    <item>
      <title><![CDATA[VMWare is Better Than Microsoft]]></title>
      <link>http://securityratty.com/article/a030161b183f83f292761020fb04b7d9</link>
      <guid>http://securityratty.com/article/a030161b183f83f292761020fb04b7d9</guid>
      <description><![CDATA[After barely surviving the VMworld registration process, my first session was From Hypervisors to VMware Infrastructure What Matters? or as I would have called it why VMware is so much better than...]]></description>
      <content:encoded><![CDATA[<p>After barely surviving the <a href="http://www.vmworld.com/conferences/2008/" target="_blank">VMworld</a> registration process, my <a href="https://vmworld2008.wingateweb.com/scheduler/eventguide/publicScheduleByType.jsp?ts=1221517325133" target="_blank">first session</a> was “From Hypervisors to VMware Infrastructure – What Matters?” – or as I would have called it “why VMware is so much better than Microsoft…and if you don’t believe that we can help you make even more money on top of your already successful Microsoft business.” (I know, that title is way too long but quite descriptive.)</p>
<p>The session took place at the beginning of Partner Day. The “regular” conference sessions actually begin tomorrow. Today is spent focusing on partner issues and enablement.</p>
<p>The panel for this session included:</p>
<ul>
<li>Mark Chuang <small>Group Manager, Product Marketing, </small>VMware, Inc.</li>
<li>Kenon Owens <small>Staff Systems Engineer, </small>VMware, Inc.</li>
</ul>
<p>You have to remember that <a href="http://www.virtualization.info/2008/09/more-than-20-partners-announces-support.html" target="_blank">most of the Partners here</a> are not vendors like ScienceLogic, but big and small shops that are selling IT, networking and now virtualization solutions into end-customer environments. For these guys, understanding what virtualization partner programs and tools are at NetApp, for example, is very useful. And many of these companies are already selling Microsoft software and surrounding services for Microsoft products. So if you’re VMware, what’s the message to these partners in the face of the Microsoft juggernaut?</p>
<blockquote><p>Microsoft to partners: “You may not like to admit it, but you’re probably already in bed with us.”</p>
<p>VMware to partners: &#8220;Our hypervisor technology outperforms Hyper-V and Xen, especially at scale. And anyway, it’s not about the battle at the hypervisor. It’s about the V-services on top of the hypervisor – VMotion, Storage VMotion, DRS, etc.&#8221;</p></blockquote>
<p>Interesting and what we all already know, or think we know. The scale issue is an interesting one – too soon for <a href="http://blogs.technet.com/virtualization/archive/2008/09/12/pre-vmworld-check-out-hyper-v-server-and-live-migration-demos.aspx" target="_blank">Hyper-V</a> and who uses Xen? But also interestingly enough, no announcement or even talk about extending VMware management tools to other hypervisors. The point, as the VMware product marketing guy made a point of saying, is that the question they needed to answer used to be “Why Virtualization?” and now it’s “Why VMware?&#8221;.</p>
<p>One more tidbit – this survey run by VMware asking their customers:</p>
<p><strong>What are the top 6 apps you are running on VMware today</strong></p>
<ul>
<li>IIS</li>
<li><em>Apache</em></li>
<li>Active Directory</li>
<li>SQL Server</li>
<li>Sharepoint</li>
<li>Exchange</li>
<p><em></em></ul>
<p><strong>That means, 5 of 6 are Microsoft applications. </strong>Certainly it makes it even more challenging for VMware to navigate a path here.</p>
<p>The change since 2004 – would have talked about why virtualize. And now why VMware. (Duh.)</p>
<p>Talking to partners – many of which already have a successful Microsoft business. How VMware <a href="http://gigaom.com/2008/09/14/for-vmware-an-uncertain-future/" target="_blank">enhances your existing Microsoft business</a>.</p>
<p><strong>Top 6 apps running on VMware today (5 of 6 are Microsoft applications)</strong></p>
<ul>
<li>IIS</li>
<li><em>Apache</em></li>
<li>AD</li>
<li>Sql server</li>
<li>Sharepoint</li>
<li>Exchange</li>
</ul>
<p><em>Source: VMware survey</em></p>
<p>Esxi - VMware – true thin hypervisor; maximizes resources utilization (over 100% memory commitment – allows avg of 2:1 memory overcommit) – host system memory is usually the resource bottleneck – plus Advanced Scheduler runs VMs better under load and to a greater capacity (hard to show this part); performance acceleration – using binary translation (32bit), para-virtualization and Hardware Assist (for 64-bit)</p>
<p>(rvi – rapid virtualization indexing)</p>
<p>No parent partition that all hypervisors have to go through</p>
<p>Vs ms/xen</p>
<p>Parent partition – dom 0 =&gt; potentially problem at scale; i/o that could be a bottleneck</p>
<p>Hyper-v SPECjbb comparison</p>
<p>= 9 vms on VMware and hyper-v hypervisors</p>
<p>Outperform (CPU) by 50% - general purpose scheduler isn’t able to keep up? “got to be”</p>
<p>(cpu only test)</p>
<p>Also used VMmark – to demonstrate again that VMware is performance tuned and designed to run at scale vs Hyper-V</p>
<p>Size Does Matter:</p>
<p>Vmware ESXi: 32MB</p>
<p>Hyper-v – 2.6 GB</p>
<p>Xen – 1.2 GB</p>
<p>Hyper-V uses Microsoft Server Core – so the last two Patch Tuesdays had to make changes to Server Core (nothing to do with Hyper-V) but service interruption for Hyper-V.</p>
<p>VMware VMsafe – “Provides an unprecedented level of security” “virtual is more secure than Real” (uh oh – clearly didn’t read about the</p>
<p>*****************</p>
<p>VMware TEST:512 mb vms on server w/ 4gb ram –</p>
<p>7 vms - xensource (w/no memory overcommit)</p>
<p>6vms – hyper-v before error (w/no memory overcommit)</p>
<p>14vms - w/memory overcommit and management</p>
<p>Running sql io sim – heavy workloads</p>
<p>TCO – not just license; now ESXi is free – so hardware</p>
<p>809 - ESXi</p>
<p>871 – vi3 foundation ($995)</p>
<p>1168- vi3 enterprise ($5750)</p>
<p>1621 – hyper-v – 2x cost because of hw</p>
<p>Xen – 1618</p>
<p>Memory overcommit (89% in production vs. test/dev)</p>
<p>Survey – 37% of respondents at 2:1 RATIO OR HIGHER; real average is around 1.8: 1</p>
<p>*********************</p>
<p>This guy Mark sounds like a used car salesman:</p>
<p>“Always On, On Demand Data Center”</p>
<blockquote><p>Hypervisor is very important but what is more important are the v-services on top of this. Manage shared, pooled resources. “Value Above the Hypervisor”</p></blockquote>
<p>How does all this save “your customers” $$?</p>
<p><strong>VMotion – saves cost on planned maintenance: no more overtime, no more time scheduling maintenance windows (see cost framework below)</strong></p>
<p>10 (# of servers) x 6 (@ of updates) x [ (overtime cost 2hrs x $150/hr) + (scheduling downtime # of apps per server 15 x time spend scheduling per app 0.75 hr x $50/hr)] = $58,500</p>
<p>Same thing with using VMware Storage VMotion</p>
<p>Overtime cost + scheduling downtime + planning move + alternative tool cost - $68,750 (2.5 TeraBytes)</p>
<p><strong>The Value of High Availability</strong></p>
<p>- cost of lost business, lost work</p>
<p>- cost of lost productive time</p>
<p>4 hours of downtime x # of users per vm 10 x number of vms per host 15 x cost of user productive time $50/hr x failures per year in 10-host cluster 2 = $60K</p>
<p>(10 servers, 150 vms)</p>
<p><strong>SAVINGS (using enterprise version)</strong></p>
<p>Update management 149,760</p>
<p>HA 60K</p>
<p>DRS, VMotion Storage VMotion 187,250</p>
<p>808,259 – hw, power cooling, etc.</p>
]]></content:encoded>
      <pubDate>Mon, 15 Sep 2008 19:00:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/vmware">vmware</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/survey">survey</category>
      <category domain="http://securityratty.com/tag/vmware survey">vmware survey</category>
      <category domain="http://securityratty.com/tag/vmware enhances">vmware enhances</category>
      <category domain="http://securityratty.com/tag/vmware infrastructure">vmware infrastructure</category>
      <category domain="http://securityratty.com/tag/test">test</category>
      <category domain="http://securityratty.com/tag/vmware test">vmware test</category>
      <category domain="http://securityratty.com/tag/overtime cost 2hrs">overtime cost 2hrs</category>
      <source url="http://blog.sciencelogic.com/vmware-is-better-than-microsoft/09/2008">VMWare is Better Than Microsoft</source>
    </item>
    <item>
      <title><![CDATA[One Risky Point]]></title>
      <link>http://securityratty.com/article/8bee2a596d75afb29063929e1cc13710</link>
      <guid>http://securityratty.com/article/8bee2a596d75afb29063929e1cc13710</guid>
      <description><![CDATA[The city of San Francisco's problem with one network engineer hints at management issues for all IT shops, says Frank...]]></description>
      <content:encoded><![CDATA[The city of San Francisco's problem with one network engineer hints at management issues for all IT shops, says Frank Hayes.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=uIU7sn"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=uIU7sn" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/348012292" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 28 Jul 2008 03:32:42 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network engineer hints">network engineer hints</category>
      <category domain="http://securityratty.com/tag/management issues">management issues</category>
      <category domain="http://securityratty.com/tag/frank hayes">frank hayes</category>
      <category domain="http://securityratty.com/tag/san francisco">san francisco</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/shops">shops</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/348012292/article.do">One Risky Point</source>
    </item>
    <item>
      <title><![CDATA[Get Involved Now In Cloud Computing Discussions]]></title>
      <link>http://securityratty.com/article/a06cd0de4e69f284cadf864ed07e11a2</link>
      <guid>http://securityratty.com/article/a06cd0de4e69f284cadf864ed07e11a2</guid>
      <description><![CDATA[This week Amazons Simple Storage Service (S3) suffered a major outage that affected several websites that rely on the service. This is actually the second major outage for Amazon S3 this year. As a...]]></description>
      <content:encoded><![CDATA[<p><img border="0" title="Stephanie Balaouras" alt="Stephanie Balaouras" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Stephanie-Balaouras.gif" style="margin: 0px 5px 5px 0px; float: left;" /></p>
<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman">This week Amazon’s Simple Storage Service (S3) suffered a major outage that affected several websites that rely on the service. This is actually the second major outage for Amazon S3 this year. As a result of these and other reported outages, some companies will come to question whether they should pursue these new cloud-based services in the future. I agree with </span><a href="http://www.roughtype.com/archives/2008/02/amazons_s3_util.php"><span face="Times New Roman">Nick Carr</span></a><span face="Times New Roman">, whether you’re a startup looking to rely on the cloud almost exclusively for computing power and storage capacity or you’re a brick and mortar company who may want to use SaaS services for CRM or an </span><a href="http://www.forrester.com/go?docid=42947"><span face="Times New Roman">online backup service</span></a><span face="Times New Roman">, these outages should not scare companies away from cloud-based services. Outages are inevitable; no one, not the most sophisticated internal IT shops on Wall Street, or the largest service providers can offer 100% availability all the time. </span><a href="http://status.aws.amazon.com/"><span face="Times New Roman">Amazon threw everything it had to fix the problem</span></a><span face="Times New Roman"> and was able to address the outage in several hours. How well would you be able to execute on your disaster recovery plan if you had a major outage?</span></p>

<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman"><br /></span></p>

<p class="MsoNormal" style="margin: 0pt;"></p>













<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman">Instead of avoiding cloud-based services, organizations need to be savvier about security and resiliency of the service provider. In fact, your organization may already be in pursuit of these services. Online backup is becoming a viable alternate to premise-based solutions for PC backup as well as remote office backup. Next will be a number of services related to information management such as </span><a href="/t/app/Local%20Settings/Temporary%20Internet%20Files/OLKF5/The%20Forrester%20Wave:%20Message%20Archiving%20Hosted%20Services,%20Q1%202008"><span face="Times New Roman">online archiving</span></a><span face="Times New Roman"> and online records management and more online storage offerings to support low cost storage. Further down the road, there will also be hosted, multi-tenancy Exchange solutions. Get involved in these discussions. Don’t take it for granted that the potential service provider has hardened data centers that meet Tier III or Tier IV classifications (these classifications describe data center site infrastructure and topology, Tier IV is the highest rating), that your data is replicated to another data center, that your data is encrypted in flight and at rest and that the service provider has strong security measures in place so that administrators can support the infrastructure but not access or even see your organization’s information.<span style="text-decoration: underline;">&nbsp;</span></span><a href="http://www.forrester.com/go?docid=43849"><span face="Times New Roman">Organizations should have consistent processes before, during and after the contracts have been signed. </span></a><span face="Times New Roman"><br /></span></p>

<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman"><br /></span></p>

<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman">And, when you ask about SLAs regarding resiliency, keep in mind that there will be some downtime for routine maintenance and that some unplanned downtime is inevitable. Consider a service provider that might boast about 99.9% availability (8 hours/year outage for 24x7). What is the difference between the following?</span></p>

<p class="MsoNormal" style="margin: 0pt;"></p>





<p class="MsoNormal" style="margin: 0pt 0pt 0pt 90pt; text-indent: -18pt;"><span style="font-family: Symbol;">·<span style="font-family: &quot;Times New Roman&quot;; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">&nbsp;</span></span><span face="Times New Roman">8 AM to 4 PM on the last Friday of the quarter </span></p>

<p class="MsoNormal" style="margin: 0pt 0pt 0pt 90pt; text-indent: -18pt;"><span style="font-family: Symbol;">·<span style="font-family: &quot;Times New Roman&quot;; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">&nbsp;</span></span><span face="Times New Roman">Biweekly outages of 30 min at 4 AM local time</span></p>

<p class="MsoNormal" style="margin: 0pt;"></p>





<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman">Timing and duration are more important than total downtime/outage.</span></p>

<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman"><br /></span></p>

<p class="MsoNormal" style="margin: 0pt;"></p>





<p class="MsoNormal" style="margin: 0pt;"><span face="Times New Roman">Get involved in these discussions but be careful not to come off as the obstacle or as the doomsayer. Quite the opposite, you want to be seen as the enabler. Help the organization understand some of the potential risks but then help the organization define its resiliency requirements, security requirements, and risk tolerance. When the organization knows this, it can more confidently go out and select the right service provider, negotiate the appropriate SLAs and be prepared ahead of time with contingency plans for any potential service outages.</span></p>]]></content:encoded>
      <pubDate>Thu, 24 Jul 2008 06:55:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/online backup service">online backup service</category>
      <category domain="http://securityratty.com/tag/online">online</category>
      <category domain="http://securityratty.com/tag/potential service provider">potential service provider</category>
      <category domain="http://securityratty.com/tag/service provider">service provider</category>
      <category domain="http://securityratty.com/tag/online storage offerings">online storage offerings</category>
      <category domain="http://securityratty.com/tag/online records management">online records management</category>
      <category domain="http://securityratty.com/tag/online backup">online backup</category>
      <category domain="http://securityratty.com/tag/potential service outages">potential service outages</category>
      <source url="http://blogs.forrester.com/srm/2008/07/get-involved-no.html">Get Involved Now In Cloud Computing Discussions</source>
    </item>
    <item>
      <title><![CDATA[The Ayyildiz Turkish Hacking Group VS Everyone]]></title>
      <link>http://securityratty.com/article/e5949393a0e7be6e2ea6b20dadaba58c</link>
      <guid>http://securityratty.com/article/e5949393a0e7be6e2ea6b20dadaba58c</guid>
      <description><![CDATA[Certain hacktivist groups often come and go by the time the momentum of their particular cause is long gone. Excluding the hardcore hacktivists who are obliged to defend their country's infrastructure...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="text-align: center; clear: both;"></div><div style="text-align: left;"></div><div class="" style="clear: both;"><a href="http://bp0.blogger.com/_wICHhTiQmrA/SH-6Lbjq6XI/AAAAAAAAB7M/dn0skav9XIg/s1600-h/AYYILDIZ_TEAM.jpg" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp0.blogger.com/_wICHhTiQmrA/SH-6Lbjq6XI/AAAAAAAAB7M/mYlVgqX-mVU/s200-R/AYYILDIZ_TEAM.jpg" style="border: 0pt none ;" /></a>Certain hacktivist groups often come and go by the time the momentum of their particular cause is long gone. Excluding the hardcore hacktivists who are obliged to defend their country's infrastructure and reputation on the international scene, smart enough to do on one front, there are certain hacktivist groups who ensure their future existence by declaring war and every single country that has ever made statements in contradiction with their vision. Quite a stimulating factor for ensuring the future of your script kiddies group, isn't it?<br />
<br />
One of these groups is the AYYILDIZ TEAM, a group of Turkish script kiddies who've been pretty active as of recently, targeting everyone, everywhere, leaving statements like the following :</div><br />
"<i>Me, as AYT-Admin Barbaros, swear to everything which is lovely and holy to me, that you will pay for your actions. We, AYT, as a Cyber Attacking Army will make it sure. Read right, what will we do:<br />
<br />
* The government websites will be inaccessible an all lawsuits will be manipulated</i><br />
<i>* We will infiltrate the server of inland revenues for the manipulation of the data which are there.</i><br />
<i>* At the same time we will insist into the server of banks and will care for chaos</i><br />
<i>* Websites of the press will be extinguished.</i><br />
<i>* If the offence of our prophet (s.a.v.) called your press freedom, we will show you this press freedom</i><br />
<i>* Websites of divers shops will be hacked. Databank information's and the dates which are there, for example credit card dates, will be policed in this page. (Don't worry, we wouldn't taste one cent of your moneys, we aren't thieves like you. However we don't take care of what happens, if other hackers see this dates and empty your account)</i>"<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="text-align: center; clear: both;"></div><a href="http://bp0.blogger.com/_wICHhTiQmrA/SIBtXRQhuII/AAAAAAAAB7U/WwX3npoBZvI/s1600-h/SQL_turkz.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp0.blogger.com/_wICHhTiQmrA/SIBtXRQhuII/AAAAAAAAB7U/saIYE3fxpdA/s200-R/SQL_turkz.JPG" style="border: 0pt none ;" /></a>While this may sound inspiring, <b>some of the group's members are also involved in SQL injections in between the web site defacements</b>, which are naturally done by exploiting web application vulnerabilities. For instance, right after the defacement messages, they are also injecting the following fast-fluxed domains, part of the latest wave of SQL injections attacks.<b></b><br />
<br />
<b>bkpadd.mobi /ngg.js<br />
usaadw.com /ngg.js<br />
cliprts.com /ngg.js</b><br />
<br />
They are monetizing their defacements by either compiling lists of sites known to be SQL injectable since they've managed to defaced them, then reselling these to the SQL injectors, or are in fact part of the whole process in this scammy ecosystem. Speaking of SQL injections, here's the most recent list of fast-fluxed SQL injected domains participating in the last wave that I've been keeping track of for a while :<br />
<br />
<b>pyttco .com/ngg.js<br />
butdrv .com/ngg.js<br />
gitporg .com/ngg.js<br />
brcporb .ru/ngg.js<br />
korfd .ru/ngg.js<br />
adwnetw .com/ngg.js<br />
wowofmusiopl .com.cn/456.js<br />
adwbn .ru/ngg.js<br />
btoperc .ru/ngg.js<br />
nudk .ru/ngg.js<br />
bkpadd .mobi/ngg.js<br />
cliprts .com/ngg.js<br />
adwr .ru/ngg.js<br />
bnrc .ru/ngg.js<br />
adpzo .com/ngg.js<br />
iogp .ru/ngg.js<br />
lodse .ru/ngg.js<br />
usabnr .com/ngg.js<br />
vcre .ru/ngg.js<br />
sdkj .ru/ngg.js<br />
rcdplc .ru/ngg.js<br />
7maigol .cn/ri.js<br />
j8heisi .cn/ri.js<br />
usaadp .com/ngg.js<br />
gbradp .com/ngg.js<br />
cdrpoex .com/ngg.js<br />
rrcs .ru/ngg.js<br />
gbradw .com/ngg.js<br />
hiwowpp .cn/ri.js<br />
cdport .eu/ngg.js<br />
nopcls .com/ngg.js<br />
loopadd .com/ngg.js<br />
tertad .mobi/ngg.js<br />
gbradde .tk/ngg.js<br />
tctcow .com/ngg.js<br />
ausbnr .com/ngg.js<br />
movaddw .com/ngg.js<br />
grtsel .ru/ngg.js<br />
sslwer .ru/ngg.js<br />
destad .mobi/ngg.js<br />
hdrcom .com/ngg.js<br />
addrl .com/ngg.js<br />
porttw .mobi/ngg.js<br />
bnsdrv .com/ngg.js<br />
drvadw .com/ngg.js<br />
crtbond .com/ngg.js<br />
usaadw .com/ngg.js</b><br />
<br />
What used to be plain simple cooperating among every single participant in the underground marketplace, seems to be evolving into long-term business relationships.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/07/monetizing-compromised-web-sites.html">Monetizing Compromised Web Sites</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/monetizing-web-site-defacements.html">Monetizing Web Site Defacements</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/underground-multitasking-in-action.html">Underground Multitasking in Action</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/right-wing-israeli-hackers-deface.html">Right Wing Israeli Hackers Deface Hamas's Site</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/pro-serbian-hacktivists-attacking.html">Pro-Serbian Hacktivists Attacking Albanian Web Sites</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/rise-of-kosovo-defacement-groups.html">The Rise of Kosovo Defacement Groups</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/commercial-web-site-defacement-tool.html">A Commercial Web Site Defacement Tool</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/phishing-tactics-evolving.html">Phishing Tactics Evolving</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/web-site-defacement-groups-going.html">Web Site Defacement Groups Going Phishing</a><br />
<a href="http://ddanchev.blogspot.com/2006/02/hacktivism-tensions.html">Hacktivism Tensions</a><br />
<a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/mass-defacement-by-turkish-hacktivists.html">Mass Defacement by Turkish Hacktivists</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/overperforming-turkish-hacktivists.html">Overperforming Turkish Hacktivists</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=727PxJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=727PxJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=JwIAWJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=JwIAWJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=RvHRWj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=RvHRWj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ZamBlj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ZamBlj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=YzU9yJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=YzU9yJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2kBf4J"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2kBf4J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LV5ldj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LV5ldj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/338894561" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 18 Jul 2008 01:48:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/comngg">comngg</category>
      <category domain="http://securityratty.com/tag/sql injections attacks">sql injections attacks</category>
      <category domain="http://securityratty.com/tag/sql injections">sql injections</category>
      <category domain="http://securityratty.com/tag/rungg">rungg</category>
      <category domain="http://securityratty.com/tag/sql">sql</category>
      <category domain="http://securityratty.com/tag/web sites">web sites</category>
      <category domain="http://securityratty.com/tag/web site defacement">web site defacement</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/sites">sites</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/338894561/ayyildiz-turkish-hacking-group-vs.html">The Ayyildiz Turkish Hacking Group VS Everyone</source>
    </item>
    <item>
      <title><![CDATA[Capital Market CEP Fantasy Land]]></title>
      <link>http://securityratty.com/article/34d9a8128d15d52ecec3bfe7b769f285</link>
      <guid>http://securityratty.com/article/34d9a8128d15d52ecec3bfe7b769f285</guid>
      <description><![CDATA[In Tech Spending Hit by Subprime Mess , Jeffery Schwartz says
According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly,...]]></description>
      <content:encoded><![CDATA[<div class='snap_preview'><br /><p>In <a href="http://reddevnews.com/news/article.aspx?editorialsid=9988" target="_blank">Tech Spending Hit by Subprime Mess</a>, Jeffery Schwartz says,</p>
<blockquote><p>&#8220;According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly, do a better job at risk management. As such, investments in capabilities such as algorithmic trading and complex event processing (CEP) are likely to be pivotal in some firms&#8217; efforts to become more competitive and improve their efforts at mitigating risks.&#8221;</p></blockquote>
<blockquote><p>&#8220;But for some banks that have deployed such technologies &#8212; the now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch &#8212; the question is: How did these companies fail to mitigate the risks that have slammed their businesses if their development teams were developing and deploying sophisticated systems?</p>
<p>&#8220;There is definitely an awareness that perhaps the systems that existed in place to assess the value of portfolios or judge risk [are being scrutinized],&#8221; said Stevan Vidich, an industry architect in Microsoft&#8217;s financial services group. &#8220;</p></blockquote>
<blockquote><p>He added that there is strong interest in CEP and other risk management methodologies. A growing number of shops have started deploying such solutions based on the .NET Framework, Vidich said, and he believes such investments will continue.</p></blockquote>
<blockquote><p>&#8220;Clearly, there&#8217;s a lot of need to deal with the immense influx of data and being able to analyze data in a timely manner,&#8221; Vidich said. &#8220;It also drives need for systems like business intelligence, or BI, applied to a near-real-time scenario, which is a very attractive proposition.&#8221;</p></blockquote>
<p>What are these guys on Wall Street smoking? </p>
<p>This is the precise &#8220;over hyping&#8221; problem I have warned about repeatedly.   Folks selling rule engines that perform basic calculations over a time window of streaming data have been marketing their wares as &#8220;superbrains&#8221; that can solve very complicated problems and, at the same time, save Wall Street and The Planet.</p>
<p>Let me be perfectly clear here Wall Street.  Listen very carefully.</p>
<p>There is nothing in any of the so called CEP products in the market place that is going to stop losses related to the subprime meltdown effecting the &#8220;<em>now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch</em>,&#8221; as Jeffery Schwartz implies.</p>
<p>To imply that the risk management (and corporate governance) required to mitigate the current crisis on Wall Street can be foreseen, solved, or even mitigated, by a rules engine (or any software) is complete and absolute fantasy.   </p>
<p>I think the fever created by the subprime flu is putting folks on Wall Street, or at least the vendors and the analysts pandering to them, in a Capital Market CEP Fantasy Land.</p>
<p> </p>
<img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/eventprocessing.wordpress.com/255/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/eventprocessing.wordpress.com/255/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/eventprocessing.wordpress.com/255/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/eventprocessing.wordpress.com/255/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/eventprocessing.wordpress.com/255/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=thecepblog.com&blog=1100533&post=255&subd=eventprocessing&ref=&feed=1" /></div>]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 09:38:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/risk management methodologies">risk management methodologies</category>
      <category domain="http://securityratty.com/tag/risk management">risk management</category>
      <category domain="http://securityratty.com/tag/wall street">wall street</category>
      <category domain="http://securityratty.com/tag/now-defunct bear stearns">now-defunct bear stearns</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz implies">jeffery schwartz implies</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz">jeffery schwartz</category>
      <category domain="http://securityratty.com/tag/subprime">subprime</category>
      <source url="http://thecepblog.com/2008/06/23/capital-market-cep-fantasy-land/">Capital Market CEP Fantasy Land</source>
    </item>
    <item>
      <title><![CDATA[Capital Market CEP Fantasy Land]]></title>
      <link>http://securityratty.com/article/2b86dd3c2e87f7b28f8b7b7da7d5e9d5</link>
      <guid>http://securityratty.com/article/2b86dd3c2e87f7b28f8b7b7da7d5e9d5</guid>
      <description><![CDATA[In Tech Spending Hit by Subprime Mess , Jeffery Schwartz says
According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly,...]]></description>
      <content:encoded><![CDATA[<p>In <a href="http://reddevnews.com/news/article.aspx?editorialsid=9988" target="_blank">Tech Spending Hit by Subprime Mess</a>, Jeffery Schwartz says,</p>
<blockquote><p>&#8220;According to Tabb, spending on development is being refocused on projects that can help firms improve their margins and, not surprisingly, do a better job at risk management. As such, investments in capabilities such as algorithmic trading and complex event processing (CEP) are likely to be pivotal in some firms&#8217; efforts to become more competitive and improve their efforts at mitigating risks.&#8221;</p></blockquote>
<blockquote><p>&#8220;But for some banks that have deployed such technologies &#8212; the now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch &#8212; the question is: How did these companies fail to mitigate the risks that have slammed their businesses if their development teams were developing and deploying sophisticated systems?</p>
<p>&#8220;There is definitely an awareness that perhaps the systems that existed in place to assess the value of portfolios or judge risk [are being scrutinized],&#8221; said Stevan Vidich, an industry architect in Microsoft&#8217;s financial services group. &#8220;</p></blockquote>
<blockquote><p>He added that there is strong interest in CEP and other risk management methodologies. A growing number of shops have started deploying such solutions based on the .NET Framework, Vidich said, and he believes such investments will continue.</p></blockquote>
<blockquote><p>&#8220;Clearly, there&#8217;s a lot of need to deal with the immense influx of data and being able to analyze data in a timely manner,&#8221; Vidich said. &#8220;It also drives need for systems like business intelligence, or BI, applied to a near-real-time scenario, which is a very attractive proposition.&#8221;</p></blockquote>
<p>What are these guys on Wall Street smoking? </p>
<p>This is the precise &#8220;over hyping&#8221; problem I have warned about repeatedly.   Folks selling rule engines that perform basic calculations over a time window of streaming data have been marketing their wares as &#8220;superbrains&#8221; that can solve very complicated problems and, at the same time, save Wall Street and The Planet.</p>
<p>Let me be perfectly clear here Wall Street.  Listen very carefully.</p>
<p>There is nothing in any of the so called CEP products in the market place that is going to stop losses related to the subprime meltdown effecting the &#8220;<em>now-defunct Bear Stearns, Lehman Brothers, Citigroup and Merrill Lynch</em>,&#8221; as Jeffery Schwartz implies.</p>
<p>To imply that the risk management (and corporate governance) required to mitigate the current crisis on Wall Street can be foreseen, solved, or even mitigated, by a rules engine (or any software) is complete and absolute fantasy.   </p>
<p>I think the fever created by the subprime flu is putting folks on Wall Street, or at least the vendors and the analysts pandering to them, in a Capital Market CEP Fantasy Land.</p>
<p> </p>
]]></content:encoded>
      <pubDate>Mon, 23 Jun 2008 09:38:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/risk management methodologies">risk management methodologies</category>
      <category domain="http://securityratty.com/tag/risk management">risk management</category>
      <category domain="http://securityratty.com/tag/wall street">wall street</category>
      <category domain="http://securityratty.com/tag/now-defunct bear stearns">now-defunct bear stearns</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz implies">jeffery schwartz implies</category>
      <category domain="http://securityratty.com/tag/jeffery schwartz">jeffery schwartz</category>
      <category domain="http://securityratty.com/tag/subprime">subprime</category>
      <source url="http://www.thecepblog.com/2008/06/23/capital-market-cep-fantasy-land/">Capital Market CEP Fantasy Land</source>
    </item>
    <item>
      <title><![CDATA[DecaffeinatID: A Very Simple IDS / Log Watching App / ARPWatch For Windows]]></title>
      <link>http://securityratty.com/article/eee2c65519e92d6ae12793ffc9d32715</link>
      <guid>http://securityratty.com/article/eee2c65519e92d6ae12793ffc9d32715</guid>
      <description><![CDATA[DecaffeinatID started because I wanted a simple ARP Watch like application for Windows. In a short matter of time, feature creep set in. DecaffeinatID is a simple little app that acts as an Intrusion...]]></description>
      <content:encoded><![CDATA[DecaffeinatID started because I wanted a simple ARP Watch like application for 
Windows. In a short matter of time, feature creep set in. DecaffeinatID is a 
simple little app that acts as an Intrusion Detection System (more of a log 
watcher really) to notify the user whenever fellow users at their local WiFi 
hotspot/ LAN are up to the kind of &quot;reindeer games&quot; that often happen at coffee shops and hacker cons.
<p><a href="http://feeds.feedburner.com/~a/IrongeeksSecuritySite?a=fP7MD4"><img src="http://feeds.feedburner.com/~a/IrongeeksSecuritySite?i=fP7MD4" border="0"></img></a></p><img src="http://feeds.feedburner.com/~r/IrongeeksSecuritySite/~4/315076759" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 18 Jun 2008 20:37:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/simple">simple</category>
      <category domain="http://securityratty.com/tag/decaffeinatid">decaffeinatid</category>
      <category domain="http://securityratty.com/tag/simple arp">simple arp</category>
      <category domain="http://securityratty.com/tag/intrusion detection system">intrusion detection system</category>
      <category domain="http://securityratty.com/tag/feature creep set">feature creep set</category>
      <category domain="http://securityratty.com/tag/coffee shops">coffee shops</category>
      <category domain="http://securityratty.com/tag/windows">windows</category>
      <category domain="http://securityratty.com/tag/short matter">short matter</category>
      <category domain="http://securityratty.com/tag/reindeer games">reindeer games</category>
      <source url="http://feeds.feedburner.com/~r/IrongeeksSecuritySite/~3/315076759/i.php">DecaffeinatID: A Very Simple IDS / Log Watching App / ARPWatch For Windows</source>
    </item>
    <item>
      <title><![CDATA[Danger in Dubai?]]></title>
      <link>http://securityratty.com/article/98b75579ae29805b62278e6d64bd9360</link>
      <guid>http://securityratty.com/article/98b75579ae29805b62278e6d64bd9360</guid>
      <description><![CDATA[Those who come to Dubai could be forgiven for thinking that this is an Oasis in a peaceful desert. In reality though, they would do well to remember that this Oasis is located in the middle of a...]]></description>
      <content:encoded><![CDATA[Those who come to Dubai could be forgiven for thinking that this is an Oasis in a peaceful desert.  In reality though, they would do well to remember that this Oasis is located in the middle of a volatile region. <br /><span id="fullpost"><br />I came to Dubai and the United Arab Emirates a week ago to promote an International Executive Protection course that we are holding here later in the summer.  While it is true that most citizens in the U.A.E. are law abiding, there is potential here for opportunists to turn that around.  Anyone who spends anytime here, especially in the vicinity of Dubai, will see that it is an extremely wealthy area.<br /><br />I was talking to an ex-pat business man last night at dinner and he made the comment that a friend of his could not get the attention of the Valets at a local club recently because he was "only driving a Porsche 911".  The valets were too busy finding premium parking spots for the Bentleys, Aston Martins and Ferraris.  This is why Sexton Executive Security is opening an office in the U.A.E.  We believe it is only a matter of time before cunning criminals realize how much money they could make from kidnappings, stealing luxury cars/chop shops and a host of other crimes.<br /><br />Then yesterday morning something else happened.  One of the Embassies released a terrorist alert warning for the U.A.E.  Despite the fact that this is the Middle East, alerts like this are not common.  Afteralll, this is a shopper's paradise where vistors can spend thousands of dollars on a hotel suite for the night.  Now we have begun to compile a list of Executive Protection Specialists with current passports who are available for International assignments.<br /><br />Don't let the bright lights fool you.  This is not Kansas Dorothy.  Keep your eyes open and like they used to say on Hill Street Blues; "let's be careful out there."             <br /></span><div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Tue, 17 Jun 2008 13:57:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dubai">dubai</category>
      <category domain="http://securityratty.com/tag/luxury carschop shops">luxury carschop shops</category>
      <category domain="http://securityratty.com/tag/sexton executive security">sexton executive security</category>
      <category domain="http://securityratty.com/tag/middle east">middle east</category>
      <category domain="http://securityratty.com/tag/bright lights fool">bright lights fool</category>
      <category domain="http://securityratty.com/tag/middle">middle</category>
      <category domain="http://securityratty.com/tag/executive protection specialists">executive protection specialists</category>
      <category domain="http://securityratty.com/tag/international executive protection">international executive protection</category>
      <category domain="http://securityratty.com/tag/hill street blues">hill street blues</category>
      <source url="http://www.thebulletproofblog.com/2008/06/danger-in-dubai.html">Danger in Dubai?</source>
    </item>
  </channel>
</rss>
