<![CDATA[[SecurityRatty] tag: subscribe]]> http://securityratty.com/tag/subscribe Thu, 19 Jun 2008 07:17:24 +0000 iRatty Engine http://blogs.law.harvard.edu/tech/rss <![CDATA[Blue Box #80: VoIPShield vulnerabilities, what is ethical disclosure?, SIP trunking, VoIP security news, new nomadism, and much more...]]> http://securityratty.com/article/f67dc99a7a07715d84135662a2d7276b http://securityratty.com/article/f67dc99a7a07715d84135662a2d7276b

Synopsis:  Blue Box #80: VoIPShield vulnerabilities, what is ethical disclosure?, SIP trunking, VoIP security news, new nomadism, and much more...

Welcome to Blue Box: The VoIP Security Podcast #80, a 44-minute podcast  from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.   

Download the show here (MP3, 20MB) or subscribe to the RSS feed to download the show automatically. 

NOTE: This show was originally recorded on April 17, 2008.

You may also listen to this podcast right now:

Show Content:

Comments, suggestions and feedback are welcome either as replies to this post  or via e-mail to blueboxpodcast@gmail.com.  Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.  You may also call the listener comment line at either +1-415-830-5439 or via SIP to 'bluebox@voipuser.org' to leave a comment there. 

Thank you for listening and please do let us know what you think of the show.

]]> Tue, 15 Jul 2008 12:22:35 +0000 voip voip security news voip news australia voip news voip security voip security podcast voipsa blog site voipsa voipshield vulnerabilities Blue Box #80: VoIPShield vulnerabilities, what is ethical disclosure?, SIP trunking, VoIP security news, new nomadism, and much more... <![CDATA[Wee-Fi: Sprint Treo 800w, New Wireless in Portland (Ore.), Hartford (Conn.) Fail]]> http://securityratty.com/article/f1981ba4dac94faf8437d40c4aeb2ef4 http://securityratty.com/article/f1981ba4dac94faf8437d40c4aeb2ef4 Palm Treo 800w released: Sprint is offering the EVDO/Wi-Fi phone with Windows Mobile 6.1 and built-in GPS. The phone is $250 with a two-year contract. This is apparently the phone that Palm should have released a couple of years ago; now, it's unfavorably compared to the iPhone except for keyboard entry and the ability to subscribe ($10/mo) for turn-by-turn live navigation. You'll note that applications are scarcely mentioned, which is one of the linchpins of the iPhone. This is a business phone with productivity tools--unlike the iPhone, you can use on-board apps to create and edit Word and Excel documents, not just view them. There's also no store mentioned for purchasing video and audio, or software for synchronizing them. The reviewer finds the video quality washed out as well, and the 320-by-320-pixel touchscreen is a bit small compared to other smartphones that focus on video.

Stephouse steps into Portland, Ore., void: Local firm Stephouse has built out 5 sq mi of business-grade wireless availability in downtown Portland and 2 sq mi in an underserved part of north Portland using Proxim gear for both Wi-Fi and WiMax service. Wi-Fi use is $20 per month or 1 free hour per day up to 10 free hours per month. The offering seems to focus on the business side, though, in competition with services like Towerstream. Prices aren't listed on the company's site.

Hartford drops Wi-Fi effort: Connecticut's trouble capital city has given up on city-wide Wi-Fi. No surprise. No firms ready to build for free, no money, no tangible goals. My wife grew up in the suburb to the west--West Hartford, prosaically enough--and speculates that the lack of county-oriented government in Connecticut has doomed Hartford to be a civic wasteland. It's recovering a bit as housing affordability goes up, and there's more going on in the city than there used to be. But there won't be Wi-Fi. Incidentally, the Mark Twain House & Museum in Hartford, home of one of the world's first bloggers, is near financial ruin. It's a great piece of American history; I'm hoping it's saved again--it's had many lives since Twain built it and went bankrupt.

]]> Mon, 14 Jul 2008 06:45:41 +0000 hartford portland city-wide wi-fi city business phone phone business business-grade wireless availability free hour Wee-Fi: Sprint Treo 800w, New Wireless in Portland (Ore.), Hartford (Conn.) Fail <![CDATA[A Blast from the Past: Processing Patterns for Predictive Business, March 2006]]> http://securityratty.com/article/82a7aa9e17030f2308e03502a40f3bef http://securityratty.com/article/82a7aa9e17030f2308e03502a40f3bef For readers interested in complex event processing and a few of the challenges the industry faces, here is a presentation from 28 months back called Processing Patterns for Predictive Business.   This presentation was delivered at the first Workshop on Event Processing - Presentations at IBM Research Labs, Yorktown Heights, March 14-16th 2006.

The same key points of that presentation are still relevant today:

1. Event-Decision Processing is Computationally Intensive

2. CEP requires a Number of Technologies:

  • Distributed Computing, Publish/Subscribe and SOA
  • Hierarchical, Cooperative Inference Processing
  • High Speed, Real Time Processing with State Management
  • Event-Decision Architecture for Complex Situations and Events
  • There is no single “CEP Solution” or “CEP Product” (in the market place then, and today)

3. CEP needs a Common Vocabulary and Functional Architecture based on Mature, Industry-Standard Inference Models

4. Processing and Integration Patterns for CEP need to be Developed and Formalized

Since March of 2006 a number of other challenges has surfaced.  I will elaborate on this challenges in a future post.

]]> Wed, 09 Jul 2008 03:22:26 +0000 event-decision architecture cep event-decision cep requires cep product patterns march event complex event A Blast from the Past: Processing Patterns for Predictive Business, March 2006 <![CDATA[Security Briefing: July 2nd]]> http://securityratty.com/article/86b6637d849af0ba574d4cc66c7b29f3 http://securityratty.com/article/86b6637d849af0ba574d4cc66c7b29f3
newspapera.jpg

Back in the saddle again. It’s a short week for both sides of the border here in North America. Happy post Canada Day to my brethren and a Happy (and approaching) July 4th to our cousins to the south.

Click here to subscribe to Liquidmatrix Security Digest!.

And now, the news…

  1. 2600 HOPE conference bringing hacking to New York City (and we’ll see you there) | CNET
  2. FBI Investigating Major ATM Hacking Ring | Las Vegas Now
  3. Study: Unpatched Web Browsers Prevalent on the Internet | PC World
  4. Netherlands man arrested for hacking 50,000 credit cards | Security Pro Portal
  5. Vint Cerf Says Government Needs To Encourage Internet Competition | Information Week
  6. The Government’s Top Hackers? | Veracode
  7. HSBC sites vulnerable to XSS flaws, could aid phishing attacks | ZDNet
  8. HMRC goes cap-in-hand to Americans for help with fraud | The Independent

Tags: , , , ,

]]> Wed, 02 Jul 2008 09:20:43 +0000 encourage internet competition internet security news news hsbc sites vulnerable web browsers prevalent governments top hackers security pro portal north america Security Briefing: July 2nd <![CDATA[Security Briefing: June 26th]]> http://securityratty.com/article/20cb5c5674bc648f3e21f47cde22b211 http://securityratty.com/article/20cb5c5674bc648f3e21f47cde22b211
newspapera.jpg

OK, the database cluster is back up and playing nice after its petulant episode.

Click here to subscribe to Liquidmatrix Security Digest!.

And now, the news…

  1. MoD implements new data security measures | PC Advisor
  2. Do natural human traits make us more vulnerable to computer malware? | Hexus
  3. The staff, the thief, the device and its data | Network World
  4. Credit card firms wave stick at retailers | The Australian
  5. Merchants call credit card industry’s bluff on compliance | The Register
  6. Chairman: Computer Hacking ‘Much More Widespread’ | WYFF 4
  7. Fired Houston organ bank worker accused of hacking into system | Houston Chronicle
  8. PCI standard ‘ignores’ insider threat | vnunet
  9. Student suspended after hacking emails | Stuff NZ

Tags: , , , ,

]]> Thu, 26 Jun 2008 09:11:27 +0000 data data security measures security news news natural human traits computer computer malware database cluster security blog Security Briefing: June 26th <![CDATA[Security Briefing: June 24th]]> http://securityratty.com/article/7c51b13e19619dcf4c3d6327c107b355 http://securityratty.com/article/7c51b13e19619dcf4c3d6327c107b355
newspapera.jpg

Another day, another coffee.

Click here to subscribe to Liquidmatrix Security Digest!.

And now, the news…

  1. Former SEMO Employee Found with Data Files of Personal Information of Students | KFVS 12
  2. Ruby flaws send security researchers into shock | The Register
  3. WhiteHat Secures $7 Million Round of Funding | Earth Times
  4. UK firm offers web-based software audit | vnunet
  5. Educating Employees Reduces Security Breaches | Small Business Computing
  6. New Trojan Leverages Unpatched Mac Flaw | Washington Post
  7. Secrecy an effective legal tool The Star

Tags: , , , ,

]]> Tue, 24 Jun 2008 07:00:07 +0000 security news news effective legal tool washington post firm offers whitehat secures software audit security blog mac flaw Security Briefing: June 24th <![CDATA[Security Briefing: June 23rd]]> http://securityratty.com/article/33d65958fe5c073bba72d300f653c95c http://securityratty.com/article/33d65958fe5c073bba72d300f653c95c
newspapera.jpg

Not bad. I actually managed to get a good night sleep.

Click here to subscribe to Liquidmatrix Security Digest!.

And now, the news…

  1. Google and Wildcard Domains | GNUCITIZEN
  2. Trojan plays anti-China games for hacking | The Economic Times
  3. Villains Getting Smarter: Are We, Too? | Korea Times
  4. Agency Sees Theft Risk for ID Card in Medicare | NY Times
  5. Universities urged to tighten computer security | The Arizona Daily Star
  6. Organised e-crime targets students for recruitment | ZDNet UK
  7. Time to dismount the hamster security wheel of pain | The Regsiter
  8. New security awareness posters aid the battle | Cambridge Network

Tags: , , , ,

]]> Mon, 23 Jun 2008 06:39:10 +0000 economic times times security news news korea times hamster security wheel e-crime targets students arizona daily star theft risk Security Briefing: June 23rd <![CDATA[It Is With Great Trepidation...]]> http://securityratty.com/article/88711f88ef6d949b3f59ecc713956bc0 http://securityratty.com/article/88711f88ef6d949b3f59ecc713956bc0 FINALLY!!! - joined the blogging world.

Sanford's first post "Why standards?" starts thus: "I’ve often wondered about the viability of broad vendor adoption of a log standard" (read more)

If some of you - you know who you are! - think that my blog is sometimes shallow in its coverage, that it doesn't have enough regexes and SQL commands, you HAVE TO go and subscribe to Sanford's; this will be deeeeep, since Sanford probably forgot more about logs than most of us would ever know (BTW, I am serious). Also BTW, Sanford is a Log Data Architect at LogLogic.

Lately, there have been much more people blogging about logs (I will post some new resources in a bit), but this is truly an event of the century...
About me: http://www.chuvakin.org
]]> Fri, 20 Jun 2008 12:12:00 +0000 sanford broad vendor adoption log data architect post logs ancient art sql commands true adepts log analysis It Is With Great Trepidation... <![CDATA[Security Briefing: June 20th]]> http://securityratty.com/article/1bfc63ff81e391bc3c3f814b2bf51762 http://securityratty.com/article/1bfc63ff81e391bc3c3f814b2bf51762
newspapera.jpg

Friday is upon us and I can see light at the end of the tunnel.

Click here to subscribe to Liquidmatrix Security Digest!.

And now, the news…

  1. Computer with software stolen from RIDC Park Company (SCADA management software) | Pittsburgh Tribune-Review
  2. Staff ignore data security, surveys say | IT PRO
  3. Lessons from the Verizon 2008 Data Breach Investigations Report | InfoWorld
  4. Microsoft’s critical Bluetooth patch didn’t work on XP | Network World
  5. Sweden passes eavesdropping law | International Herald Tribune
  6. From zero day exploit to zero day fix | IT Director
  7. Briton searched web for ways to kill, court told | The Guardian
  8. FaceTime Security Program Locks out MySpace Applets | PC World
  9. Security breach hits DivShare, unauthorized access to its database | ZDNet

Tags: , , , ,

]]> Fri, 20 Jun 2008 08:52:08 +0000 security news scada management software software news international herald tribune ridc park company world network world day exploit Security Briefing: June 20th <![CDATA[Security Briefing: June 19th]]> http://securityratty.com/article/fa3192f343c0f2e64009c0471a05b7d5 http://securityratty.com/article/fa3192f343c0f2e64009c0471a05b7d5
newspapera.jpg

Making lists of things to remember as I scramble to keep my focus in the face of a lack of sleep. Next thing you know I’ll be putting sticky notes on things. “Coffee cup”, “Door”, “Advil” and “C-61 / bad joke”.

You get the idea.

Click here to subscribe to Liquidmatrix Security Digest!. Welcome to the new subscribers who joined us yesterday! Thanks!

And now, the news…

  1. Copyright Bill’s Fine Print Makes For a Disturbing Read | Michael Geist
  2. A Week in the Life of the Canadian DMCA: Part Two | Michael Geist
  3. DMC-eh? Why Canada’s new Copyright law is a mistake | Mang Bat
  4. E-Mail: To Encrypt or Not to Encrypt? | NPR
  5. Hazel Blears’s stolen laptop was not encrypted | Information Age
  6. Encryption: DLP’s Newest Ingredient | Dark Reading
  7. Merchant Securities’ stock broking firm fined for poor data security procedures | RTT News
  8. State computers headed for sale had private information | The Topeka Capital-Journal
  9. Fed slammed over internal controls | Houston Chronicle

Tags: , , , ,

]]> Thu, 19 Jun 2008 07:17:24 +0000 rtt news news information information security michael geist security news merchant securities stock information age topeka capital-journal Security Briefing: June 19th