<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: talks]]></title>
    <link>http://securityratty.com/tag/talks</link>
    <description></description>
    <pubDate>Mon, 04 Aug 2008 13:48:24 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[This Generations ApathyThe Age of Specialization and ADD]]></title>
      <link>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</link>
      <guid>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</guid>
      <description><![CDATA[Robert Scoble has some interesting commentary this morning about the number of photojournalists with expensive gear covering the Olympics
Hes a bit indignant that so much energy goes to sporting...]]></description>
      <content:encoded><![CDATA[<p>Robert Scoble has some interesting <a rel="nofollow" target="_blank" href="http://scobleizer.com/">commentary</a> this morning about the number of photojournalists with expensive gear covering the Olympics.</p>
<p>He&#8217;s a bit indignant that so much energy goes to sporting events like the Olympics rather than more important news that isn&#8217;t getting reported around the world.</p>
<blockquote><p>This is in a year when tons of journalists are getting laid off.</p>
<p>This is in a year when there are tons of stories around the world that aren’t getting reported on.</p>
<p>Could we take half of those photographers and send them to Russia, for instance</p></blockquote>
<p>Reminds me of a feeling I had back in college as an undergrad student studying social sciences and humanities, about the way my friends who were physicists interacted with the world. They were so awed by the stars, Mars, astrophysics, and it seemed to me interesting but altogether unimportant. They argued they may find something outside our planet that could help solve Earth-bound problems like disease, or find the origins of earth and humanity &#8212; but really they were doing it because they loved it. One of my friends had a good argument, though &#8212; there are enough people right now that we can specialize in what we care about, and there will still be others covering other topics. He could be a physicist and look into the universe&#8217;s origin, while I studied social interaction and writing, and our other friends looked into solving cancer or eradicating invasive plants in the native wetlands. We have to specialize, and there are enough of us to do it too.</p>
<p>I think it&#8217;s the same way in journalism &#8212; whether it&#8217;s sports, celebrity journalism, or coverage of politics and war, there are a lot of opportunities right now for journalists. Of course the business model is changing, and some old-schoolers won&#8217;t know how to roll with that, but generations change slowly; we&#8217;re learning.</p>
<p>Also, the Olympics is seen as more than a sporting event, it&#8217;s also a symbol of world competition and cooperation too &#8212; a way for countries to come together and share entertainment globally. I think that&#8217;s worth covering.</p>
<p>In the second post, Robert Scoble says there are plenty of great journalists but the public doesn&#8217;t care. In some ways I have to agree with that, but I don&#8217;t think it&#8217;s negative, necessarily. I had a conversation with someone the other day about world news reportage. He says, &#8220;I was just reading this story, but what does it matter to me if there&#8217;s a flood in some city in another country I&#8217;ll never visit and some farmer lost his sheep?&#8221; World news is only important when it&#8217;s relevant, so it&#8217;s no wonder that many people don&#8217;t care &#8212; if they don&#8217;t know much about the area, and it doesn&#8217;t affect them, they have no incentive to give it full attention. You can call that apathy, but I think it&#8217;s an important selectivity skill that humans have. We have to choose what to give priority to, so if nothing stands out as being particularly important, we just ignore it or gloss over it. Human nature&#8230;</p>
<p>Also I think the common person today just gets desensitized and doesn&#8217;t know where to turn their energy, when surrounded by so many crises. Either you focus on one specialty and do your best to work toward one cause in your life &#8212; and maybe that&#8217;s just in the course of your daily work &#8212; or you become a complete Attention-Deficit-Disorder case and bounce from one problem to the next, without knowing how to solve anything. That just causes a sense of bewilderment, despair, and either that bogs you down or eventually you get desensitized.</p>
<p>There&#8217;s a commenter on Scoble&#8217;s blog, Spencer, who talks about this generation&#8217;s apathy. There are so many people who want to blame today&#8217;s generation or the young generation for this &#8220;apathy&#8221; that they sense. But I see it as a survival mechanism that arises from the way information flows these days. We&#8217;re surrounded by crises, everyone wants us to know about them &#8212; the water shortage, global warming, death in Iraq, the national deficit. Okay, crisis, I get it. But no one gives a real clear idea on what any individual is really supposed to do to solve the problem. You can&#8217;t get involved with one global cause, without ignoring all the others, and if you do get involved it&#8217;s likely to become your life&#8217;s purpose. Most people are concerned with other things &#8212; their families, their work, personal development, their homes and futures, and really that&#8217;s enough to take up all their time.</p>
<p>I&#8217;m always amazed when I read about the early unionists. Emma Goldman for example, the activist who pushed for the 8-hr workday, and campaigned for free love in the early 1900s when women were still wearing corsets, used to work 16 hour factory days as a seamstress, then lead meetings late into the night. Today we lead cushy lives comparatively&#8211;8 hour days, plus commute and lunch, family time, dinner time, gym maybe, sleep&#8230; but it still doesn&#8217;t seem like we ever have enough energy and time.</p>
<p>What Emma had that most people today don&#8217;t, is a community living in the same conditions as herself, with clear goals about what they were campaigning for, and a cause that affected their own daily lives. Today, unionism and local activism is in much shorter supply, in part due to the many people who work fairly comfy desk jobs, and the problem that everyone has his own specialization, works in a cubicle, does his or her own thing. The problems we&#8217;re facing today in terms of global warming, global water shortage, aren&#8217;t the same kinds of problems that activists have fought for in the past, and there&#8217;s no clear road map for how to solve them. Our leaders sure aren&#8217;t leading the way.</p>
<p>What we do have, at least, is the Olympics, which is an age old symbol of international cooperation, play and competition&#8230;so, uh, go sports! As for full disclosure, I don&#8217;t actually have a TV and haven&#8217;t watched the Olympics in many years, but I do try taking short showers&#8211;does that help?</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 09:46:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/world news reportage">world news reportage</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/world competition">world competition</category>
      <category domain="http://securityratty.com/tag/world news">world news</category>
      <category domain="http://securityratty.com/tag/global water shortage">global water shortage</category>
      <category domain="http://securityratty.com/tag/global">global</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/solve earth-bound">solve earth-bound</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/369359733/">This Generations ApathyThe Age of Specialization and ADD</source>
    </item>
    <item>
      <title><![CDATA[New Releases at Defcon]]></title>
      <link>http://securityratty.com/article/6b70bb54d788a022a4d23f955e0fc8cc</link>
      <guid>http://securityratty.com/article/6b70bb54d788a022a4d23f955e0fc8cc</guid>
      <description><![CDATA[One of my funny moments at Black Rock City last year was meeting a random guy early one morning on deep playa, chatting and finding out we both were involved in IT security. Hed been at the defcon...]]></description>
      <content:encoded><![CDATA[<p>One of my funny moments at Black Rock City last year was meeting a random guy early one morning on deep playa, chatting and finding out we both were involved in IT security. He&#8217;d been at the defcon conference just before Burning Man, we talked for just a minute about industry publications and the hacker contests, before getting distracted with shinier things. I&#8217;m not going this year but everyone I know is buzzing about BM this year:)</p>
<p>I was just reminded of this randomly just by reading this list of new tools released at the Defcon this year. Sounds like a busy conference, with a lot of hackers who love what they do. Good stuff.</p>
<blockquote><p>It has become more like a global fair than what most people think of conferences; even the badge is highly unique. I say this because there are so many things to do at DEFCON, other than going to talks, that you could spend your whole weekend looking at the &#8220;World&#8217;s Largest Boar!&#8221; so to speak. One of the CTF (Capture the Flag) contest winners this year actually exclaimed that he only made it to 2 talks in 12 years! I am also one of those individuals who barely get a chance to go to talks and now that the speaker pool is so diverse it&#8217;s hard to find all of the &#8220;stuff&#8221; they release.</p></blockquote>
<p>Read the <a rel="nofollow" target="_blank" href="http://www.room362.com/archives/217-DEFCON-16-The-Tools-not-the-Toools.html">list and full article</a> here</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 09:04:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/defcon">defcon</category>
      <category domain="http://securityratty.com/tag/defcon conference">defcon conference</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/black rock city">black rock city</category>
      <category domain="http://securityratty.com/tag/busy conference">busy conference</category>
      <category domain="http://securityratty.com/tag/industry publications">industry publications</category>
      <category domain="http://securityratty.com/tag/list">list</category>
      <category domain="http://securityratty.com/tag/funny moments">funny moments</category>
      <category domain="http://securityratty.com/tag/random guy">random guy</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/369359734/">New Releases at Defcon</source>
    </item>
    <item>
      <title><![CDATA[Show 029 - An Interview with Dennis Fisher]]></title>
      <link>http://securityratty.com/article/ed23afa251e7ed42c51726c5d78957a6</link>
      <guid>http://securityratty.com/article/ed23afa251e7ed42c51726c5d78957a6</guid>
      <description><![CDATA[On the 29th episode of The Silver Bullet Security Podcast, Gary talks with Dennis Fisher, executive editor of The Security Media Group at TechTarget. Dennis helps run SearchSecurity.com and...]]></description>
      <content:encoded><![CDATA[<p><img align="right" alt="Dennis Fisher" title="Dennis Fisher" src="http://www.cigital.com/silverbullet/dfisher-108.png" style="padding-left: 7px;" /></p>
<p>On the 29th episode of The Silver Bullet Security Podcast, Gary talks with Dennis Fisher, executive editor of The Security Media Group at TechTarget.  Dennis helps run SearchSecurity.com and <em>Information Security Magazine</em>.  Gary and Dennis discuss the current &#8220;BS factor&#8221; in security journalism, shopping at TJ Maxx right after the TJX privacy breach, the state of software security, and which is harder: being a fry cook at Hardees or working as a PR flack.</p>
<ul>
<li><a href="http://security.blogs.techtarget.com/author/security/">Dennis&#8217; blog</a></li>
<li><a href="http://searchsecurity.techtarget.com/news/column/0,294698,sid14_gci1239802,00.html">TJX</a></li>
<li><a href="http://music.aol.com/video/dirty-laundry/the-eagles/tag/joe-walsh/1354381">Joe Walsh plays dirty laundry</a></li>
<li><a href="http://www.informit.com/articles/article.aspx?p=1237978">Software Security Grows</a></li>
<li><a href="http://securitywireweekly.blogs.techtarget.com/2008/07/31/the-state-of-software-security">Dennis&#8217; un-named podcast</a></li>
<li><a href="http://www.youtube.com/watch?v=f99PcP0aFNE">Series of Tubes</a></li>
<li><a href="http://www.hardees.com/">Hardees</a></li>
<li><a href="http://www.cs.washington.edu/research/systems/privacy.htm">Nike/iPod</a></li>
</ul>
]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 11:05:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dennis">dennis</category>
      <category domain="http://securityratty.com/tag/dennis fisher">dennis fisher</category>
      <category domain="http://securityratty.com/tag/dennis discuss">dennis discuss</category>
      <category domain="http://securityratty.com/tag/software security">software security</category>
      <category domain="http://securityratty.com/tag/software security grows">software security grows</category>
      <category domain="http://securityratty.com/tag/dennis helps">dennis helps</category>
      <category domain="http://securityratty.com/tag/tjx privacy breach">tjx privacy breach</category>
      <category domain="http://securityratty.com/tag/tjx">tjx</category>
      <category domain="http://securityratty.com/tag/gary talks">gary talks</category>
      <source url="http://www.cigital.com/silverbullet/show-029/">Show 029 - An Interview with Dennis Fisher</source>
    </item>
    <item>
      <title><![CDATA[Avi Rubin]]></title>
      <link>http://securityratty.com/article/364140a4aa2f5826e762c2e2ea1dc290</link>
      <guid>http://securityratty.com/article/364140a4aa2f5826e762c2e2ea1dc290</guid>
      <description><![CDATA[E-voting critic Avi Rubin talks about the inherent weakness of software, the critical need for audit trails and the 'perfect storm' of the 2000...]]></description>
      <content:encoded><![CDATA[E-voting critic Avi Rubin talks about the inherent weakness of software, the critical need for audit trails and the 'perfect storm' of the 2000 election.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=ITWhum"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=ITWhum" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/367767253" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 18 Aug 2008 03:30:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/perfect storm">perfect storm</category>
      <category domain="http://securityratty.com/tag/inherent weakness">inherent weakness</category>
      <category domain="http://securityratty.com/tag/audit trails">audit trails</category>
      <category domain="http://securityratty.com/tag/critical">critical</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/election">election</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/367767253/article.do">Avi Rubin</source>
    </item>
    <item>
      <title><![CDATA[Speaking of Security Podcast #118]]></title>
      <link>http://securityratty.com/article/fb67ff3ce1f2b335b3f648a50bd31bd9</link>
      <guid>http://securityratty.com/article/fb67ff3ce1f2b335b3f648a50bd31bd9</guid>
      <description><![CDATA[Click to Download/Listen (11:27

This week, Amanda Van Veen speaks with analyst Rod Nelsestuen from the TowerGroup . Rod covers key issues affecting several financial industry segments including...]]></description>
      <content:encoded><![CDATA[<a href="http://www.rsa.com/blog/blog_entry.aspx?id=1332">Click to Download/Listen</a> (11:27)<br><br />This week, Amanda Van Veen speaks with analyst Rod Nelsestuen from the <a href="http://www.towergroup.com/research/home/index.htm" target="_blank">TowerGroup</a>.  Rod covers key issues affecting several financial  industry segments including emerging markets and trend, security, and risk management  matters and in this segment, talks with Amanda about the evolution of business  continuity planning and security&rsquo;s increasing role.<br /><br /><br />]]></content:encoded>
      <pubDate>Sun, 17 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk management matters">risk management matters</category>
      <category domain="http://securityratty.com/tag/financial industry segments">financial industry segments</category>
      <category domain="http://securityratty.com/tag/amanda van">amanda van</category>
      <category domain="http://securityratty.com/tag/amanda">amanda</category>
      <category domain="http://securityratty.com/tag/analyst rod">analyst rod</category>
      <category domain="http://securityratty.com/tag/business continuity">business continuity</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/markets">markets</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1332">Speaking of Security Podcast #118</source>
    </item>
    <item>
      <title><![CDATA[Q&A: Legendary 2600 Mag Editor Talks Bygone Hacking Eras]]></title>
      <link>http://securityratty.com/article/54376cc00d387f809a33635fb4f1cdc8</link>
      <guid>http://securityratty.com/article/54376cc00d387f809a33635fb4f1cdc8</guid>
      <description><![CDATA[Hacker magazine 2600 editor Emmanuel Goldstein talks with Geekdad about the new book compiled from the publication which traces the history of hacking and hacker...]]></description>
      <content:encoded><![CDATA[Hacker magazine 2600 editor Emmanuel Goldstein talks with Geekdad about the new book compiled from the publication which traces the history of hacking and hacker culture.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=4dbd2e6aa5c9fd0d177b8c8735250abf" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=4dbd2e6aa5c9fd0d177b8c8735250abf" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=cjeHUK"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=cjeHUK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=EMfPAk"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=EMfPAk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=NAnksk"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=NAnksk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=BzQ25K"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=BzQ25K" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=BOF8cK"><img src="http://feeds.wired.com/~f/wired/politics/security?i=BOF8cK" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=Cc6iok"><img src="http://feeds.wired.com/~f/wired/politics/security?i=Cc6iok" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=zjFTFk"><img src="http://feeds.wired.com/~f/wired/politics/security?i=zjFTFk" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=PaEzoK"><img src="http://feeds.wired.com/~f/wired/politics/security?i=PaEzoK" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/363190464" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/363190618" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 10:30:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hacker culture">hacker culture</category>
      <category domain="http://securityratty.com/tag/hacker magazine">hacker magazine</category>
      <category domain="http://securityratty.com/tag/geekdad">geekdad</category>
      <category domain="http://securityratty.com/tag/history">history</category>
      <category domain="http://securityratty.com/tag/traces">traces</category>
      <category domain="http://securityratty.com/tag/book">book</category>
      <category domain="http://securityratty.com/tag/publication">publication</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/363190618/the-geekdads-in.html">Q&amp;A: Legendary 2600 Mag Editor Talks Bygone Hacking Eras</source>
    </item>
    <item>
      <title><![CDATA[Economist.com - Confessions of a Risk Manager]]></title>
      <link>http://securityratty.com/article/536365450db644abfa519cdc03dc2c4c</link>
      <guid>http://securityratty.com/article/536365450db644abfa519cdc03dc2c4c</guid>
      <description><![CDATA[I was reading the Economist this week and came across an excellent article titled &quot; Confessions of a Risk Manager

In the article a risk manager for a major financial institution talks about managing...]]></description>
      <content:encoded><![CDATA[I was reading the <a href="http://www.economist.com/">Economist </a>this week and came across an excellent article titled "<a href="http://www.economist.com/finance/displaystory.cfm?story_id=11897037">Confessions of a Risk Manager</a>".<br /><br />In the article a risk manager for a major financial institution talks about managing risks and how the risk department was viewed as an obstacle by the rest of the business.  I'll just quote a section here so you can see that governance roles, especially those involving trade-offs of risk vs. return are difficult not just in security.<br /><blockquote>In their eyes, we were not earning money for the bank. Worse, we had the power to say no and therefore prevent business from being done. Traders saw us as obstructive and a hindrance to their ability to earn higher bonuses. They did not take kindly to this. Sometimes the relationship between the risk department and the business lines ended in arguments.   . . .<br /><br />Tactfully explaining why we said no was not our forte. Traders were often exasperated as much by how they were told as by what they were told.  <p>At the root of it all, however, was—and still is—a deeply ingrained flaw in the decision-making process. In contrast to the law, where two sides make an equal-and-opposite argument that is fairly judged, in banks there is always a bias towards one side of the argument. The business line was more focused on getting a transaction approved than on identifying the risks in what it was proposing. The risk factors were a small part of the presentation and always “mitigated”. This made it hard to discourage transactions. If a risk manager said no, he was immediately on a collision course with the business line. The risk thinking therefore leaned towards giving the benefit of the doubt to the risk-takers.<br /></p><p>Collective common sense suffered as a result. Often in meetings, our gut reactions as risk managers were negative. But it was difficult to come up with hard-and-fast arguments for why you should decline a transaction, especially when you were sitting opposite a team that had worked for weeks on a proposal, which you had received an hour before the meeting started. In the end, with pressure for earnings and a calm market environment, we reluctantly agreed to marginal transactions.</p></blockquote><br />Every time I read about decision making like this I refer back to an some excellent presentations I've come across by Reidar Bratvold.  He has done some excellent presentations on decision making in the face of risks/uncertainty.<br /><br /><ul><li><a href="www.spe.no/stavanger/doc/Bratvold%20-%20SPE%20Dist%20Lecturer.pdf">Would You Know a Good decision if You Saw One?</a></li><li><a href="http://www.reidar-bratvold.com/Decision%20Making%20Under%20Uncertainty%20-%20BadenBaden.pdf">Decision Making Under Uncertainty</a></li></ul><img src="http://feeds.feedburner.com/~r/SecurityRetentive/~4/362069047" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 04:42:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/risk manager">risk manager</category>
      <category domain="http://securityratty.com/tag/risk factors">risk factors</category>
      <category domain="http://securityratty.com/tag/risk-takers">risk-takers</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/business line">business line</category>
      <category domain="http://securityratty.com/tag/risk managers">risk managers</category>
      <category domain="http://securityratty.com/tag/risk department">risk department</category>
      <category domain="http://securityratty.com/tag/business lines">business lines</category>
      <source url="http://feeds.feedburner.com/~r/SecurityRetentive/~3/362069047/economistcom-confessions-of-risk.html">Economist.com - Confessions of a Risk Manager</source>
    </item>
    <item>
      <title><![CDATA[Black Hat Talks Pulled After Industry Pressure]]></title>
      <link>http://securityratty.com/article/c3044e32c6768e8b02d36302280ca590</link>
      <guid>http://securityratty.com/article/c3044e32c6768e8b02d36302280ca590</guid>
      <description><![CDATA[A few Apple-related talks scheduled for next weeks Black Hat conference have been cut from the line-up, presumably because they would reveal too much insider information about vulnerabilities
Brian...]]></description>
      <content:encoded><![CDATA[<p>A few Apple-related talks scheduled for next week&#8217;s Black Hat conference have been cut from the line-up, presumably because they would reveal too much insider information about vulnerabilities.</p>
<p>Brian Krebs has the details&#8211;</p>
<blockquote><p>
Charles Edge, a researcher from Georgia, had been slated to discuss his research on a weakness that could be used to defeat FileVault encryption on the Mac. But sometime last week, Black Hat organizers pulled his name and presentation listing from its schedule of talks.</p>
<p>Contacted via cell phone, Edge said he signed confidentiality agreements with Apple, which prevents him from speaking on the topic and from discussing the matter further.</p>
<p>Almost every year, much of the drama leading up to and during Black Hat seems to revolve around talks that are canceled or censored at the last minute for various legal reasons. </p></blockquote>
<p>Read the full article <a rel="nofollow" target="_blank" href="http://voices.washingtonpost.com/securityfix/2008/07/black_hat_talk_on_apple_encryp_1.html">here.</a></p>]]></content:encoded>
      <pubDate>Wed, 06 Aug 2008 08:39:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/black hat">black hat</category>
      <category domain="http://securityratty.com/tag/talks">talks</category>
      <category domain="http://securityratty.com/tag/black hat organizers">black hat organizers</category>
      <category domain="http://securityratty.com/tag/charles edge">charles edge</category>
      <category domain="http://securityratty.com/tag/defeat filevault encryption">defeat filevault encryption</category>
      <category domain="http://securityratty.com/tag/edge">edge</category>
      <category domain="http://securityratty.com/tag/insider information">insider information</category>
      <category domain="http://securityratty.com/tag/cell phone">cell phone</category>
      <category domain="http://securityratty.com/tag/confidentiality agreements">confidentiality agreements</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/357716132/">Black Hat Talks Pulled After Industry Pressure</source>
    </item>
    <item>
      <title><![CDATA[BlackHat Picks, Day 2]]></title>
      <link>http://securityratty.com/article/bb5f61d931e262cc86324e4d585f8e2b</link>
      <guid>http://securityratty.com/article/bb5f61d931e262cc86324e4d585f8e2b</guid>
      <description><![CDATA[Heres the rest of my list
10:00-11:00 FX , Developments in Cisco IOS Forensics
11:15-12:30 Oliver Friedrichs , Threats to the 2008 Presidential Election (and more
13:45-15:00 Option 1: Scott Stender ,...]]></description>
      <content:encoded><![CDATA[<p>Here&#8217;s the rest of my list:</p>
<p><b>10:00-11:00</b> <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Lindner">FX</a>, Developments in Cisco IOS Forensics.</p>
<p><b>11:15-12:30</b> <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Friedrichs">Oliver Friedrichs</a>, Threats to the 2008 Presidential Election (and more).</p>
<p><b>13:45-15:00</b> Option 1: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Stender">Scott Stender</a>, Concurrency Attacks in Web Applications. Option 2: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Goodspeed">Travis Goodspeed</a>, Side-channel Timing Attacks on MSP430 Microcontroller Firmware.  </p>
<p><b>15:15-16:30</b> Option 1: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Sotirov">Alexander Sotirov and Mark Dowd</a>, How To Impress Girls With Browser Memory Protection Bypasses.  Option 2: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Nohl">Karsten Nohl</a>, Mifare - Little Security, Despite Obscurity.  This is one of the toughest time slots as you also have McFeters/Carter/Heasman and Grossman/Evans in the lineup.  Choices, choices.</p>
<p><b>16:45-18:00</b> Option 1: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Dang">Bruce Dang</a>, Methods for Understanding Targeted Attacks with Office Documents.  Option 2: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Tarnovsky">Christopher Tarnovsky</a>, Inducing Momentary Faults Within Secure Smartcards/Microcontrollers.</p>
<p>Lots of intriguing hardware talks on Day 2.  A lot of it is probably over my head and my first options are more applicable to my day job.  There might have to be some room hopping.</p>
<p>I fly out to Vegas tonight &#8212; see you all there!</p>
]]></content:encoded>
      <pubDate>Mon, 04 Aug 2008 13:48:24 +0000</pubDate>
      <category domain="http://securityratty.com/tag/day">day</category>
      <category domain="http://securityratty.com/tag/option">option</category>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/concurrency attacks">concurrency attacks</category>
      <category domain="http://securityratty.com/tag/cisco ios forensics">cisco ios forensics</category>
      <category domain="http://securityratty.com/tag/msp430 microcontroller firmware">msp430 microcontroller firmware</category>
      <category domain="http://securityratty.com/tag/day job">day job</category>
      <category domain="http://securityratty.com/tag/alexander sotirov">alexander sotirov</category>
      <category domain="http://securityratty.com/tag/impress girls">impress girls</category>
      <source url="http://www.veracode.com/blog/?p=163">BlackHat Picks, Day 2</source>
    </item>
    <item>
      <title><![CDATA[BlackHat Picks, Day 2]]></title>
      <link>http://securityratty.com/article/640a63fad4b288ad8b2f6f80cdfd9935</link>
      <guid>http://securityratty.com/article/640a63fad4b288ad8b2f6f80cdfd9935</guid>
      <description><![CDATA[Heres the rest of my list
10:00-11:00 FX , Developments in Cisco IOS Forensics
11:15-12:30 Oliver Friedrichs , Threats to the 2008 Presidential Election (and more
13:45-15:00 Option 1: Scott Stender ,...]]></description>
      <content:encoded><![CDATA[<p>Here&#8217;s the rest of my list:</p>
<p><b>10:00-11:00</b> <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Lindner">FX</a>, Developments in Cisco IOS Forensics.</p>
<p><b>11:15-12:30</b> <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Friedrichs">Oliver Friedrichs</a>, Threats to the 2008 Presidential Election (and more).</p>
<p><b>13:45-15:00</b> Option 1: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Stender">Scott Stender</a>, Concurrency Attacks in Web Applications. Option 2: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Goodspeed">Travis Goodspeed</a>, Side-channel Timing Attacks on MSP430 Microcontroller Firmware.  </p>
<p><b>15:15-16:30</b> Option 1: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Sotirov">Alexander Sotirov and Mark Dowd</a>, How To Impress Girls With Browser Memory Protection Bypasses.  Option 2: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Nohl">Karsten Nohl</a>, Mifare - Little Security, Despite Obscurity.  This is one of the toughest time slots as you also have McFeters/Carter/Heasman and Grossman/Evans in the lineup.  Choices, choices.</p>
<p><b>16:45-18:00</b> Option 1: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Dang">Bruce Dang</a>, Methods for Understanding Targeted Attacks with Office Documents.  Option 2: <a href="http://blackhat.com/html/bh-usa-08/bh-usa-08-speakers.html#Tarnovsky">Christopher Tarnovsky</a>, Inducing Momentary Faults Within Secure Smartcards/Microcontrollers.</p>
<p>Lots of intriguing hardware talks on Day 2.  A lot of it is probably over my head and my first options are more applicable to my day job.  There might have to be some room hopping.</p>
<p>I fly out to Vegas tonight &#8212; see you all there!</p>
]]></content:encoded>
      <pubDate>Mon, 04 Aug 2008 13:48:24 +0000</pubDate>
      <category domain="http://securityratty.com/tag/day">day</category>
      <category domain="http://securityratty.com/tag/option">option</category>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/concurrency attacks">concurrency attacks</category>
      <category domain="http://securityratty.com/tag/cisco ios forensics">cisco ios forensics</category>
      <category domain="http://securityratty.com/tag/msp430 microcontroller firmware">msp430 microcontroller firmware</category>
      <category domain="http://securityratty.com/tag/day job">day job</category>
      <category domain="http://securityratty.com/tag/alexander sotirov">alexander sotirov</category>
      <category domain="http://securityratty.com/tag/impress girls">impress girls</category>
      <source url="http://www.veracode.com/blog/2008/08/blackhat-picks-day-2/">BlackHat Picks, Day 2</source>
    </item>
  </channel>
</rss>
