<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: tear]]></title>
    <link>http://securityratty.com/tag/tear</link>
    <description></description>
    <pubDate>Tue, 15 Jan 2008 13:43:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA["Would you feel safe with this man looking after you?]]></title>
      <link>http://securityratty.com/article/8449600c6be4b5f5790eebbbff0d12d3</link>
      <guid>http://securityratty.com/article/8449600c6be4b5f5790eebbbff0d12d3</guid>
      <description><![CDATA[That was the caption under the picture of Rocker,Ted Nugent, in last Tuesday's Guardian . Nugent had volunteered to be Sir Paul McCartney's &quot;Bodyguard&quot; when he played a concert in Israel
...]]></description>
      <content:encoded><![CDATA[<a href="http://1.bp.blogspot.com/_1UFxC-OgSnA/SN_3k0Kss4I/AAAAAAAAAGc/0WSQmbx1zdU/s1600-h/Mugshot__TED-NUGENT.jpg"><img style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;" src="http://1.bp.blogspot.com/_1UFxC-OgSnA/SN_3k0Kss4I/AAAAAAAAAGc/0WSQmbx1zdU/s320/Mugshot__TED-NUGENT.jpg" border="0" alt=""id="BLOGGER_PHOTO_ID_5251187902388155266" /></a><br />That was the caption under the picture of Rocker,Ted Nugent, in last Tuesday's <a href="http://www.guardian.co.uk/music/2008/sep/23/paul.mccartney.popandrock">Guardian</a>.  Nugent had volunteered to be Sir Paul McCartney's "Bodyguard" when he played a concert in Israel. <br /><span id="fullpost"><br />Unfortunately,this is what our industry has to tolerate.  Many people, from broken down celebrity deer hunters to jail guards think that if you know how to shoot a rifle or open a gate for inmates to go to the yard, it automatically follows that you know everything about protecting the life of a executive.       <br /></span><br />So, Ted Nugent knows how to play guitar and shoot deer.  Just what part of that background would equip him to keep the former Beetle safe in the Middle East?  It is certainly not like Mr. Nugent is trying to pull the wool over our eyes when it comes to any specialized training he may have received.  "I'm Dirty Harry with a ponytail", claims the singer.<br /><br />First of all Mr. Nugent, "Dirty Harry" was a film produced by Hollywood to entertain people, not a "training aid".  Secondly, even if we were to stretch our imaginations and consider Harry Callaghan's actions, we would recall that the character was a Police Detective and as such, would have undergone rigourous training at a professional Police Academy.<br /><br />Refering to reported Islamic Extremist Death Threats made against McCartney if he insisted on playing the concert, Nugent informed us that he "will not bend or waiver to Voodoo Religions or Whackjobs".  <br /><br />It is unknown whether or not Mr. Nugent thinks that Islamic Extremists come from Haiti, but if he is serious about a future career in Executive Protection, we would advise him to attend our <a href="http://www.sextonsecurity.com/training.html">upcoming course in Dubai </a>next month where he will not only learn first hand the Art of Personal Protection, but he will also learn about Middle Eastern Cultures, Tradition and Religion.<br /><br />Unfortunately, there's no way of predicting how much culture we may be able to pass on to Mr. Nugent, as the course is only a little over a week long.  We will also be teaching etiquette and which knife and fork to use when attending a formal event with your Principal.  That's right Ted, you don't get to tear the meat from the bone with your hands.  <br /><br />Someone call the U.A.E. and let the Hilton know that we may have to stay longer than planned.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 28 Sep 2008 16:44:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ted nugent">ted nugent</category>
      <category domain="http://securityratty.com/tag/nugent">nugent</category>
      <category domain="http://securityratty.com/tag/ted">ted</category>
      <category domain="http://securityratty.com/tag/dirty harry">dirty harry</category>
      <category domain="http://securityratty.com/tag/deer">deer</category>
      <category domain="http://securityratty.com/tag/sir paul mccartney">sir paul mccartney</category>
      <category domain="http://securityratty.com/tag/mccartney">mccartney</category>
      <category domain="http://securityratty.com/tag/celebrity deer hunters">celebrity deer hunters</category>
      <category domain="http://securityratty.com/tag/professional police academy">professional police academy</category>
      <source url="http://www.thebulletproofblog.com/2008/09/would-you-feel-safe-with-this-man.html">"Would you feel safe with this man looking after you?</source>
    </item>
    <item>
      <title><![CDATA[Database statements that can make you tear out your hair]]></title>
      <link>http://securityratty.com/article/3502ac92b5ef4532375884b4e6f8a943</link>
      <guid>http://securityratty.com/article/3502ac92b5ef4532375884b4e6f8a943</guid>
      <description><![CDATA[Its been a long time since Ive written anything here. Ive been extremely busy with my family move to the bay area. I still cant believe the amount of paperwork required. Ive filled virtually hundreds...]]></description>
      <content:encoded><![CDATA[Its been a long time since I&#8217;ve written anything here. I&#8217;ve been extremely busy with my family move to the bay area. I still can&#8217;t believe the amount of paperwork required. I&#8217;ve filled virtually hundreds of forms and it&#8217;s not over yet. But, after a month here, I can say that we&#8217;ve finally settled down. [...]<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/slaviks-blog/WxxD?a=l7NFUK"><img src="http://feeds.feedburner.com/~f/slaviks-blog/WxxD?i=l7NFUK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/slaviks-blog/WxxD/~4/378232436" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 28 Aug 2008 19:52:11 +0000</pubDate>
      <category domain="http://securityratty.com/tag/family move">family move</category>
      <category domain="http://securityratty.com/tag/extremely busy">extremely busy</category>
      <category domain="http://securityratty.com/tag/bay">bay</category>
      <category domain="http://securityratty.com/tag/paperwork">paperwork</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/forms">forms</category>
      <category domain="http://securityratty.com/tag/amount">amount</category>
      <category domain="http://securityratty.com/tag/hundreds">hundreds</category>
      <source url="http://feeds.feedburner.com/~r/slaviks-blog/WxxD/~3/378232436/">Database statements that can make you tear out your hair</source>
    </item>
    <item>
      <title><![CDATA[Tucson area Domino's Pizza customer information exposed]]></title>
      <link>http://securityratty.com/article/8a47859f1eed2fddfeb4d9a0979c73fb</link>
      <guid>http://securityratty.com/article/8a47859f1eed2fddfeb4d9a0979c73fb</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
6/18/08

Organization
Domino's Pizza

Contractor/Consultant/Branch
Unnamed former owner of 24 Tucson area locations

Victims
Customers

Number Affected...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/dominos.jpg" align="right" height="176" width="175"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>6/18/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.dominos.com/home/index.jsp">Domino's Pizza</a> <br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>Unnamed former owner of 24 Tucson area locations&nbsp;&nbsp;&nbsp;&nbsp; <br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>Names and credit card numbers<br><br><span style="font-weight: bold;">Breach Description:</span><br>Hundreds of credit card receipts dating back as many as five years were found "blowing in the wind" after a former owner of 24 Domino's Pizza stores in the Tucson, Arizona area was found to have been discarding boxes of old records near her home.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.kvoa.com/Global/story.asp?S=8516485&amp;nav=HMO6HMaY">KVOA Channel 4 News</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Tom McNamara, KVOA Channel 4 News<br><br><span style="font-weight: bold;">Response:</span><br>From the online source cited above:<br><br>Investigators found credit card numbers blowing in the wind for anyone to see.<br><br>These piles and papers strewn across the alley contain hundreds of old receipts from Domino's Pizza stores.<br><br>When we got a call about this, we went down to University Avenue and Euclid and saw these receipts were three, four, and even five years old.<br><span style="font-style: italic;">[Evan] Is there any business reason to keep credit card receipts for this period of time?&nbsp; I suppose a case could be made that these should be kept for up to seven years for </span><a style="font-style: italic;" href="http://www.irs.gov/businesses/small/article/0,,id=98513,00.html">tax purposes</a><span style="font-style: italic;">.</span><br><br>We contacted the former owner of 24 Domino's Pizza stores in Tucson.<br><span style="font-style: italic;">[Evan] This could have been a very risky breach in terms of overall potential impact considering the number of affected persons.&nbsp; 24 stores, x number of credit card transactions per year, and 5 years could add up to a pretty significant number.</span><br><br>She won't talk with us on-camera, but told us she'd been discarding boxes of old records near her home and somehow all those receipts got loose.<br><span style="font-style: italic;">[Evan] Incidents like this tear me up.&nbsp; I very much doubt that this lady had any malicious intention behind her actions, but nonetheless her actions could have caused considerable inconvenience (and possible loss) to a number of individuals.&nbsp; I presume that she just didn't know any better.</span><br><br>We found Scott Brumage's name and credit card number on one of those receipts in the alley.<br><br>Tom McNamara asks him, "See that? Recognize that name? Recognize the number?" Scotts nods, "Uh huh."<br><br>Tom asks, "Well how'd you feel when we called you out of the blue and told you what we'd found? What went through your mind?"<br><br>"It was just kind of surreal at first because I like to think I can trust using my card [because of] the convenience and everything of course."<br><br>Scott was startled to see his name and card numbers on our screen.<br><br>He says he's ordered a lot of pizzas over the years and expects privacy and protection when he pays for his pepperoni pie.<br><span style="font-style: italic;">[Evan] Is this an unreasonable expectation?&nbsp; Maybe it is an unreasonable expectation, given the current environment and considering the bigger picture (merchants, processors, banks, "the system", etc.).&nbsp; I don't think that it is an unreasonable requirement, but requirements, expectations and practices are not in alignment.</span><br><br>Scotts tells us, "I don't know. [I'm] just dumbfounded, other than they need to figure a better way of disposing."<br><span style="font-style: italic;">[Evan] It is dumbfounding, isn't it.&nbsp; I often wonder what people are thinking when they do some of the things they do.</span><br><br>The Investigators contacted the Federal Trade Commission in Washington and they say thieves could potentially use discarded credit card numbers even if the card has expired. The numbers on the card in many cases are still the same.<br><br>They say there could be enough information on the receipt to help a thief reveal more information about you, such as your social security number.<br><br>It's small comfort for Scott. He says, "I'm hoping this is a one time only [situation]. They might have just lost a loyal customer."<br><span style="font-style: italic;">[Evan] The impact to the victim is usually pretty clear and easy to quantify.&nbsp; The impact to the business (or organization) is not usually as easy to measure.&nbsp; In a competitive business like pizza sales, companies need to identify and communicate differentiators like ingredient quality, service, taste, price, location, etc.&nbsp; Maybe if customers viewed information security practices as an important differentiator, businesses would put more time and effort into securing information.&nbsp; Pipe dream?</span><br><br>In this case, the Investigators contacted Tucson Police and several officers came to collect the records we found and have them destroyed.<br><br><span style="font-weight: bold;">Commentary:</span><br>This breach reminds me of a <a href="http://breachblog.com/2008/06/11/cotton.aspx#comment-1124161">recent discussion</a> I had online with Benjamin Wright in the comments section of the "<a href="http://breachblog.com/2008/06/11/cotton.aspx">Cotton Traders confirms that their website was compromised</a>" breach.&nbsp; He makes a very good argument regarding accountability in credit card breaches.&nbsp; My responses to him are included. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/06/18/dominos.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Wed, 18 Jun 2008 06:43:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit card transactions">credit card transactions</category>
      <category domain="http://securityratty.com/tag/credit card">credit card</category>
      <category domain="http://securityratty.com/tag/credit card receipts">credit card receipts</category>
      <category domain="http://securityratty.com/tag/credit card breaches">credit card breaches</category>
      <category domain="http://securityratty.com/tag/card">card</category>
      <category domain="http://securityratty.com/tag/pizza">pizza</category>
      <category domain="http://securityratty.com/tag/receipts">receipts</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/tucson">tucson</category>
      <source url="http://breachblog.com/2008/06/18/dominos.aspx">Tucson area Domino's Pizza customer information exposed</source>
    </item>
    <item>
      <title><![CDATA[Hurricane season officially begins in 24 hours and many are doing nothing about it.]]></title>
      <link>http://securityratty.com/article/d169cefcc2cac4223d5f769a472fdb1e</link>
      <guid>http://securityratty.com/article/d169cefcc2cac4223d5f769a472fdb1e</guid>
      <description><![CDATA[I was watching the weather channel yesterday to see what the weekend would be like and was surprised to learn that the price of oil is being blamed for people's lack of preparation leading up to...]]></description>
      <content:encoded><![CDATA[I was watching the weather channel yesterday to see what the weekend would be like and was surprised to learn that the price of oil is being blamed for people's lack of preparation leading up to hurricane season. <br /><br /><br />According to the broadcaster, 50% of people living in areas that are most likely to be hit by hurricanes have not conducted any disaster planning whatsoever.  Of people surveyed, 30% admitted that they will wait until they hear warnings on the television before they do anything.  The report said that this is the first time since Huricanes Katrina and Rita struck, that people were so poorly prepared.  <br /><br /><br />One very interesting fact that 95% of people do not realize is that garages are the most vulnerable area of a dwelling to be hit by a Hurricane.  The Hurricane will tear off the roof of the house right after gaining access to the property through the garage. We would urge all of our readers living in areas susceptible to hurricanes to make sure that their garages are well secured.  Times may be tight and the cost of fuel is becoming more and more burdensome but there is no point losing your house when you just may have been able to prevent it.  <br /><br />If you didn't realize this fact about your garage, check it out today.  Time may be running out.<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Fri, 30 May 2008 23:50:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hurricane">hurricane</category>
      <category domain="http://securityratty.com/tag/hurricane season">hurricane season</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/weather channel yesterday">weather channel yesterday</category>
      <category domain="http://securityratty.com/tag/rita struck">rita struck</category>
      <category domain="http://securityratty.com/tag/garages">garages</category>
      <category domain="http://securityratty.com/tag/hurricanes">hurricanes</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/huricanes katrina">huricanes katrina</category>
      <source url="http://www.thebulletproofblog.com/2008/05/hurricane-season-officially-begins-in.html">Hurricane season officially begins in 24 hours and many are doing nothing about it.</source>
    </item>
    <item>
      <title><![CDATA[In Next-Gen Bullets and Bombs, Even the Casing Explodes]]></title>
      <link>http://securityratty.com/article/d0a5d9866a8d1cba92fde9bc4208e745</link>
      <guid>http://securityratty.com/article/d0a5d9866a8d1cba92fde9bc4208e745</guid>
      <description><![CDATA[The Pentagon has quietly been working on a new arsenal of advanced weaponry that replaces metal casings with &quot;reactive materials,&quot; normally harmless matter that combines to release explosive amounts...]]></description>
      <content:encoded><![CDATA[<p>
The Pentagon has quietly been working on a new arsenal of advanced weaponry that replaces metal casings with "reactive materials," normally harmless matter that combines to release explosive amounts of energy on impact, tearing targets apart with violent fury. 
</p><p>
In development for more than 30 years, the research is beginning to bear fruit, and may soon spawn more powerful bombs, warheads that tear apart stone and concrete, mines that can be set to stun or kill, and grenades that can swat rockets or mortar rounds out of the sky like flies. 
</p><p>
"You can get effects that are more precisely tailored to a particular target," says John Pike, director of Washington military research group <a href="http://www.globalsecurity.org/">GlobalSecurity.org</a>. "And you're able to get a greater effect out of a smaller munition."
</p><p>
Reactive materials are combinations of materials that are normally stable, but, when subjected to sudden shock -- such as striking a target -- release a large amount of energy. Depending on the composition and warhead design, the energy can be released as heat, a blast or a combination of the two. Unlike conventional explosives, RMs cannot be set off by fuses. Technically, they are classified as flammable solids, and they are less hazardous to transport and store than explosives.
</p><p>
While they're more energetic than explosives, RMs are not intended to be a substitute. Instead, they will replace warhead components normally made of metal.
</p><p>
An analysis of U.S. military procurement papers and defense contractor presentations, as well as interviews with companies working on the technology, suggests that a wave of munitions using reactive materials may be headed for a battlefield near you.
</p><p>
The material can dramatically magnify the yield of conventional bombs, and do away with the waste embodied by a bomb's inert metal skin. The U.S. Air Force's 5,000 BLU-122 bunker buster, for example, contains just 780 pounds of explosives; the other 80 percent is the bomb's thick steel casing. DARPA's <a href="https://www.fbo.gov/files/f0a/f0accb88909eadb4ace790fe731eb03b.doc?i=1482beb061c1dbdbc36c23683d85e170">Reactive Munition program</a> (.doc) aims to replace that steel with RMs, to create a bomb with a blast four times as powerful. Alternatively, a new bomb could be half the size of existing weapons but twice as powerful.
</p>

<p>Conventional warheads could also benefit from an RM makeover. For centuries, shells have blasted out steel shrapnel, small pieces of metal that cause damage with their high speed. Defense contractor Alliant Techsystems is developing a warhead called <a href="http://atk.mediaroom.com/index.php?s=press_releases&item=801"> BattleAxe</a> for the Air Force that uses fragments made of RM instead of metal. Those fragments will explode on impact, making the warhead far more effective against soft targets like trucks.
</p>

<p>
RM shrapnel is also being touted as the ideal way of <a href="http://www.virtualacquisitionshowcase.com/docs/2007/DETech-Brief.pdf ">shooting down incoming rockets and mortar bombs</a> (.pdf).
</p>

<p>
A radar-guided defense pod can automatically engage incoming rockets or other threats using RM-based grenades. Weapons designers suggest that RMs can be five to ten times as effective as the existing inert shrapnel for this task. Moreover, RM shrapnel can be engineered to burn out at a set distance, so there is no hazard to nearby friendly forces.
</p>


<!--pagebreak-->

<p>
Bullets can even be made of RM. The Navy's new 
<a href="http://www.onr.navy.mil/emrg/electromagnetic-railgun.asp">electromagnetic railgun</a> has been criticized because it can only fire solid slugs, not the usual explosive shells. However, documents reveal that <a href="http://www.psicorp.com/preleases/0105tungsten.shtml">tungsten-based RM</a> rounds are being developed for the weapon. These will explode on impact, making the railgun effective against buildings, ships and vehicles.
</p><p>
Shaped charges are another application where RMs can increase the effectiveness of existing designs. In a shaped charge, a hollow metal cone is surrounded by explosive material, which is then detonated, forcing the blast through the small end of the cone.
</p><p>
"The action is analogous to stamping on an open toothpaste tube, ejecting the liquid contents," says Douglas Millard of British defense contractors <a href="http://www.qinetiq.com/">QinetiQ</a>. 
</p><p>
Replace the metal liner with RM, and the explosive power of that jet will increase dramatically.
</p><p>
"Such reactions are highly exothermic and therefore lead to the release of large amounts of energy, which is in addition to the kinetic energy within the jet," Millard says. "An increase in the energy coupled into the target occurs and this results in the creation of greater damage to the target."
</p><p>
QinetiQ is marketing an RM-based shaped charge called <a href="http://www.qinetiq.com/home/newsroom/news_releases_homepage/2007/2nd_quarter/qinetiq__shell_and.html">Connex</a> for oil-well perforation in the civil market. Meanwhile, the U.S. Army is developing a demolition charge called Bam Bam that blasts a jet of RM deep into stone or concrete, producing massive damage
</p><p>
One version of the Bam Bam charge is intended for demolishing bridges and other structures. An alternative version blasts broader, shallower craters in roads or runways, making them useless.
</p><p>
RMs will also transform another mutation called the Explosively Formed Penetrator, a modified version of the shaped charge. Instead of producing a narrow, short-range jet, the Penetrator fires an aerodynamic slug of metal over a long distance. It's best known as a favored weapon of insurgents in Iraq. Again, replacing the metal with RM makes a much deadlier weapon -- after punching through armor, the slug releases energy like a grenade going off.
</p><p>
If you're a weapons designer, RMs also offer amazing flexibility. Alliant Techsystems is building a <a href="http://proceedings.ndia.org/3500/Cvetnic_Demo_NDIA.pps">variable landmine</a> (.pps) -- a so-called "dial-a-yield" weapon that can produce a range of different effects.
</p><p>
At the lowest setting, most of the output would be light -- a dazzling warning that would be impossible to miss. A higher setting would produce intense heat, creating a "discomfort zone" to drive off intruders. The third setting produces a nonlethal blast, like the concussion stun grenades used by Special Forces. If lethal force is called for, the mine could be set to produce either inert shrapnel or reactive shrapnel that explodes on impact.
</p><p>
RM munitions may face legal challenges. Under the St. Petersburg Declaration of 1868, the use of explosive projectiles with a weight of less than 400 grams is forbidden, as is using incendiary ammunition, like napalm, against personnel. But RMs are not technically explosive or incendiary, and although the effect on human targets might cause protests from some groups, they are likely to be accepted, human rights experts say.
</p><p>
"Like any weapon, it would have to go through a lengthy effectiveness and then legal review, " says Marc Garlasco, senior military analyst at <a href="http://www.hrw.org/">Human Rights Watch</a>. "If used in the open against military targets, it does not seem to have any obvious problems at first blush." 
</p><p>
However, there may be technology issues too. Although the developers sound very upbeat in all their descriptions of RM munitions, producing material that will reliably release energy only when required is extremely challenging.
</p><p>
"The fact that they've been working on it so long and don't seem to have fielded anything yet suggests that there may be a problem with the technology," GlobalSecurity's Pike says.
</p><p>
Normally new weapons are fielded rapidly if there is a military demand -- assuming they work. So far, RMs have not made it into the field, and the technology may not be as mature as developers suggest.
</p><p>
But Pike also notes that there has been an unprecedented surge in munitions development over the last few years, with "all kinds of weird stuff" being developed.
</p><p>
So after decades of being kept very quiet, reactive materials may soon be making a lot of noise.
</p><p>
---
</p><p>
Check out <a href="http://blog.wired.com/defense/">Danger Room</a> for more on reactive materials.
</p><br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=6c55edcd405de4222b72dd8dc1e1e502" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=6c55edcd405de4222b72dd8dc1e1e502" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=kwlINH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=kwlINH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=oApXnh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=oApXnh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=UEVYAh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=UEVYAh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=BEUokH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=BEUokH" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=IBZcBH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=IBZcBH" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=ijOkQh"><img src="http://feeds.wired.com/~f/wired/politics/security?i=ijOkQh" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=kWK2Ph"><img src="http://feeds.wired.com/~f/wired/politics/security?i=kWK2Ph" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=E6CgpH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=E6CgpH" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/285018670" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/285018672" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 06 May 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/amounts">amounts</category>
      <category domain="http://securityratty.com/tag/release explosive amounts">release explosive amounts</category>
      <category domain="http://securityratty.com/tag/release">release</category>
      <category domain="http://securityratty.com/tag/metal">metal</category>
      <category domain="http://securityratty.com/tag/hollow metal cone">hollow metal cone</category>
      <category domain="http://securityratty.com/tag/explosive">explosive</category>
      <category domain="http://securityratty.com/tag/energy">energy</category>
      <category domain="http://securityratty.com/tag/reliably release energy">reliably release energy</category>
      <category domain="http://securityratty.com/tag/metal liner">metal liner</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/285018672/reactive_revolutions">In Next-Gen Bullets and Bombs, Even the Casing Explodes</source>
    </item>
    <item>
      <title><![CDATA[Its about convergence, stupid]]></title>
      <link>http://securityratty.com/article/a7b66268119dcb5ee2c8031c7789b4ef</link>
      <guid>http://securityratty.com/article/a7b66268119dcb5ee2c8031c7789b4ef</guid>
      <description><![CDATA[Dmarti's blog over on LinuxWorld has an article up titled &quot;Dumbest networking vendor idea since Network Access Control&quot; , which talks about what a dumb idea it is for Cisco to allow Linux apps to run...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Dmarti's blog over on LinuxWorld has an article up titled <a href="http://www.linuxworld.com/community/?q=node/3918" target="_blank">&quot;Dumbest networking vendor idea since Network Access Control&quot;</a>, which talks about what a dumb idea it is for Cisco to allow Linux apps to run on their ISR routers. Besides the fact that the title of the article alone is enough to make me want to tear this one apart, the underlying logic of the authors argument is just weak. </p>

<p>On one hand he talks about why would someone want to run Linux apps on a router, it is potentially bad design. On the other hand he says it is better to run them on a cheaper router alternative like Vyatta and than spouts some PR by Vyatta about their price/performance advantage over Cisco.&nbsp; They back up this advantage with &quot;3rd party testing&quot;.&nbsp; Turns out the testing is by Tolly Group.&nbsp; Oh, now that changes everything.&nbsp; Have any of you ever had a Tolly evaluation done? Anytime you submit a form that contains what you would like to see the testing show in the final report and the final report shows it, well you know what I am saying. But seriously if it is good for Vyatta, why would it not be also good for Cisco? </p>

<p>Here is the real issue though that the author misses.&nbsp; We live in an age of convergence!&nbsp; The idea of having a stand alone box that only does routing is history and when Cisco themselves acknowledge it, you know it is fact.&nbsp; People want more functionality out of their hardware.&nbsp; Now that is not to say that your router should be your database server or mail server.&nbsp; But there are certainly network functions that make sense to put on a router. Security is a no brainer to start. IPS, VPN, firewall, gateway AV- easy.&nbsp; What about network functionality like DHCP, DNS, Radius, etc.&nbsp; How about some next gen network stuff like WAP and VOIP?&nbsp; That would make sense. By embracing Linux on the router all of these things and more are possible.&nbsp; By the way you can do all of this now with our own <a href="http://cobia.stillsecure.com/" target="_blank">Cobia</a> platform. </p>

<p>That's right, we had this idea 2 years ago and have been working on it since.&nbsp; With the convergence of networking, security, VOIP and wireless technologies, why wouldn't you want a multi-use box that can deliver all of this. </p></div>
]]></content:encoded>
      <pubDate>Fri, 18 Apr 2008 05:19:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/router">router</category>
      <category domain="http://securityratty.com/tag/cheaper router alternative">cheaper router alternative</category>
      <category domain="http://securityratty.com/tag/dumb idea">dumb idea</category>
      <category domain="http://securityratty.com/tag/idea">idea</category>
      <category domain="http://securityratty.com/tag/linux">linux</category>
      <category domain="http://securityratty.com/tag/linux apps">linux apps</category>
      <category domain="http://securityratty.com/tag/vendor idea">vendor idea</category>
      <category domain="http://securityratty.com/tag/convergence">convergence</category>
      <category domain="http://securityratty.com/tag/cisco">cisco</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/04/its-about-conve.html">Its about convergence, stupid</source>
    </item>
    <item>
      <title><![CDATA[Its about convergence, stupid]]></title>
      <link>http://securityratty.com/article/fd1fd88904acaf068869dc7a011c0896</link>
      <guid>http://securityratty.com/article/fd1fd88904acaf068869dc7a011c0896</guid>
      <description><![CDATA[Dmarti's blog over on LinuxWorld has an article up titled &quot;Dumbest networking vendor idea since Network Access Control&quot; , which talks about what a dumb idea it is for Cisco to allow Linux apps to run...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>Dmarti's blog over on LinuxWorld has an article up titled <a href="http://www.linuxworld.com/community/?q=node/3918" target="_blank">&quot;Dumbest networking vendor idea since Network Access Control&quot;</a>, which talks about what a dumb idea it is for Cisco to allow Linux apps to run on their ISR routers. Besides the fact that the title of the article alone is enough to make me want to tear this one apart, the underlying logic of the authors argument is just weak. </p>

<p>On one hand he talks about why would someone want to run Linux apps on a router, it is potentially bad design. On the other hand he says it is better to run them on a cheaper router alternative like Vyatta and than spouts some PR by Vyatta about their price/performance advantage over Cisco.&nbsp; They back up this advantage with &quot;3rd party testing&quot;.&nbsp; Turns out the testing is by Tolly Group.&nbsp; Oh, now that changes everything.&nbsp; Have any of you ever had a Tolly evaluation done? Anytime you submit a form that contains what you would like to see the testing show in the final report and the final report shows it, well you know what I am saying. But seriously if it is good for Vyatta, why would it not be also good for Cisco? </p>

<p>Here is the real issue though that the author misses.&nbsp; We live in an age of convergence!&nbsp; The idea of having a stand alone box that only does routing is history and when Cisco themselves acknowledge it, you know it is fact.&nbsp; People want more functionality out of their hardware.&nbsp; Now that is not to say that your router should be your database server or mail server.&nbsp; But there are certainly network functions that make sense to put on a router. Security is a no brainer to start. IPS, VPN, firewall, gateway AV- easy.&nbsp; What about network functionality like DHCP, DNS, Radius, etc.&nbsp; How about some next gen network stuff like WAP and VOIP?&nbsp; That would make sense. By embracing Linux on the router all of these things and more are possible.&nbsp; By the way you can do all of this now with our own <a href="http://cobia.stillsecure.com/" target="_blank">Cobia</a> platform. </p>

<p>That's right, we had this idea 2 years ago and have been working on it since.&nbsp; With the convergence of networking, security, VOIP and wireless technologies, why wouldn't you want a multi-use box that can deliver all of this. </p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=Ehv0ZM"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=Ehv0ZM" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=KktMFRG"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=KktMFRG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=oSik3mG"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=oSik3mG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=XpQbG8G"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=XpQbG8G" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=K6EsX1G"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=K6EsX1G" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=MTeTTFg"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=MTeTTFg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=EKsfOkg"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=EKsfOkg" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/272882834" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 18 Apr 2008 04:19:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/router">router</category>
      <category domain="http://securityratty.com/tag/cheaper router alternative">cheaper router alternative</category>
      <category domain="http://securityratty.com/tag/dumb idea">dumb idea</category>
      <category domain="http://securityratty.com/tag/idea">idea</category>
      <category domain="http://securityratty.com/tag/linux">linux</category>
      <category domain="http://securityratty.com/tag/linux apps">linux apps</category>
      <category domain="http://securityratty.com/tag/vendor idea">vendor idea</category>
      <category domain="http://securityratty.com/tag/convergence">convergence</category>
      <category domain="http://securityratty.com/tag/cisco">cisco</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/272882834/its-about-conve.html">Its about convergence, stupid</source>
    </item>
    <item>
      <title><![CDATA[Tear Gas/Pepper Spray Resource]]></title>
      <link>http://securityratty.com/article/a36c8d37629a2f74dc6d42322ecb7bcd</link>
      <guid>http://securityratty.com/article/a36c8d37629a2f74dc6d42322ecb7bcd</guid>
      <description><![CDATA[Tear gas and pepper spray are widely used by police and military forces throughout the world to control crowds. Because of the dynamic nature of protests, aid workers may find themselves exposed to...]]></description>
      <content:encoded><![CDATA[Tear gas and pepper spray are widely used by police and military forces throughout the world to control crowds. Because of the dynamic nature of protests, aid workers may find themselves exposed to riot control agents (if you've never been gassed before, the first time can be very disconcerting). Unfortunately, this topic isn't discussed very much in traditional humanitarian security training and manuals. So to learn more we need to look to other sources, in this case, street medics.<br /><br />Street medics are independent, trained volunteer medical personnel who support activists during protests. Organized <a href="http://en.wikipedia.org/wiki/List_of_street_medic_organizations">street medic groups</a> have sprung up in a number of Western, urban locations. One of the groups, known as the <a href="http://www.blackcrosscollective.org/">Black Cross Health Collective</a>, has published extensive information on the effects of and treating tear gas and pepper spray. Check it out.]]></content:encoded>
      <pubDate>Tue, 15 Jan 2008 13:43:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tear gas">tear gas</category>
      <category domain="http://securityratty.com/tag/pepper spray">pepper spray</category>
      <category domain="http://securityratty.com/tag/street medics">street medics</category>
      <category domain="http://securityratty.com/tag/volunteer medical personnel">volunteer medical personnel</category>
      <category domain="http://securityratty.com/tag/traditional humanitarian security">traditional humanitarian security</category>
      <category domain="http://securityratty.com/tag/riot control agents">riot control agents</category>
      <category domain="http://securityratty.com/tag/street medic">street medic</category>
      <category domain="http://securityratty.com/tag/support activists">support activists</category>
      <category domain="http://securityratty.com/tag/extensive information">extensive information</category>
      <source url="http://ngosecurity.blogspot.com/2008/01/tear-gaspepper-spray-resource.html">Tear Gas/Pepper Spray Resource</source>
    </item>
  </channel>
</rss>
