<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: territory]]></title>
    <link>http://securityratty.com/tag/territory</link>
    <description></description>
    <pubDate>Mon, 17 Dec 2007 17:03:29 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Metro Round-Up: Cablevision Update; Springfield (Mich.)]]></title>
      <link>http://securityratty.com/article/04d2b01379cd1ae8f0505f615eab7ead</link>
      <guid>http://securityratty.com/article/04d2b01379cd1ae8f0505f615eab7ead</guid>
      <description><![CDATA[Cablevision says it's already spent $20m towards its plan to build out Wi-Fi across its operating territory: The cable firm has $300m budgeted to put Wi-Fi in place for its higher-tier subscribers at...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.newsday.com/business/ny-bzwifi0801,0,5681847.story"><strong>Cablevision says it's already spent $20m towards its plan to build out Wi-Fi across its operating territory:</strong></a> The cable firm has $300m budgeted to put Wi-Fi in place for its higher-tier subscribers at no cost across Long Islands and parts of New Jersey and Connecticut, as well as New York City and Westchester County. Cablevision thinks their network will be good enough to replace cell phones across their coverage, which ties in with the quadruple play many cable operators are aiming for: data, voice, video, and mobile.</p>

<p><a href="http://www.battlecreekenquirer.com/apps/pbcs.dll/article?AID=/20080801/NEWS01/808010366/1002/NEWS01"><strong>Springfield, Mich., puts in its first antennas for a city-wide network:</strong></a> The network is being built with a $750,000 grant from a state development corporation to extend access and improve the business climate. Access will cost $10 per month for residents after an initial free period while the service powers up.</p>]]></content:encoded>
      <pubDate>Fri, 01 Aug 2008 10:49:43 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/city-wide network">city-wide network</category>
      <category domain="http://securityratty.com/tag/cablevision">cablevision</category>
      <category domain="http://securityratty.com/tag/extend access">extend access</category>
      <category domain="http://securityratty.com/tag/initial free period">initial free period</category>
      <category domain="http://securityratty.com/tag/replace cell phones">replace cell phones</category>
      <category domain="http://securityratty.com/tag/access">access</category>
      <category domain="http://securityratty.com/tag/higher-tier subscribers">higher-tier subscribers</category>
      <category domain="http://securityratty.com/tag/development corporation">development corporation</category>
      <source url="http://wifinetnews.com/archives/008408.html">Metro Round-Up: Cablevision Update; Springfield (Mich.)</source>
    </item>
    <item>
      <title><![CDATA[Long Island Proposal Snags Again, on Poles]]></title>
      <link>http://securityratty.com/article/479733758aebc5a0eefa89ed8a473de2</link>
      <guid>http://securityratty.com/article/479733758aebc5a0eefa89ed8a473de2</guid>
      <description><![CDATA[Long Island proposal still mired: The plan to put Wi-Fi up across two Long Island counties has seemed doomed to me from the start. The company that won the bid was untested, and its other...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.newsday.com/news/local/ny-liwifi0728,0,7393890.story?track=rss"><strong>Long Island proposal still mired:</strong></a> The plan to put Wi-Fi up across two Long Island counties has seemed doomed to me from the start. The company that won the bid was untested, and its other in-deployment or in-proposal networks are off the table. Expertise aside, it needs tens of millions to build such a network, and financing for company-funded metro-scale projects is not available. The counties involved have pledged no purchases of services. And, perhaps the final stroke, the local utility says that E-Path doesn't meet the test of being a telecom and paying less than $10 per year for pole placement, but instead must pay the all-comer rate of $50 per year.</p>

<p>This is a critical distinction. Telecoms are covered under the Telecom Act of 1996 that requires non-discriminatory access to utility poles to avoid incumbent local exchange carriers (ILECs) and utilities from being gatekeepers that prevent competitive service from emerging. There are a series of tests in the law and local qualifications, too, that allow a firm to be a registered telecom. An FCC decision last year ruled that companies that mix telecom and unregulated information services on the same wires aren't disqualified from getting the Telecom Act deal, however. </p>

<p>But E-Path seems to meet none of the criteria except their desire to pay $10 instead of $50 per year per pole. Utility poles have held up many other municipal networks. We're not hearing more about them these days because such networks are now being built on a smaller scale for different purposes, where the number of nodes and their placement is rather different than networks built with the intent of providing indoor coverage.</p>

<p>Cablevision, by the way, qualifies as a telecom, this article states, which helps them in placing nodes for their planned $300m network across their coverage territory. They can also mount nodes in-line with their cable lines, using power from their cable plant on the lines already.</p>

<p>E-Path appears to have a variety of communication problems as well. The article notes, "Tortoretti said his Washington, D.C., attorneys disagree with LIPA's interpretation. But the attorney Tortoretti said represents E-Path, Charles Rohe, said he couldn't speak about the company or the dispute."</p>

<p>Later, E-Path's "chief executive said he hopes the county will help with his LIPA dispute." But an aide to the Suffolk County executive said, "That's not really our issue. That's out of our control."</p>

<p>Correspondent Craig Plunkett, quoted near the end, points out that if the counties were to change their minds and want to buy services on the network, the proposal would have to be rebid (appears as the sound-alike "rebuild" by accident in the online article at this moment).</p>]]></content:encoded>
      <pubDate>Mon, 28 Jul 2008 07:07:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/telecom act">telecom act</category>
      <category domain="http://securityratty.com/tag/telecom act deal">telecom act deal</category>
      <category domain="http://securityratty.com/tag/telecom">telecom</category>
      <category domain="http://securityratty.com/tag/proposal">proposal</category>
      <category domain="http://securityratty.com/tag/island proposal">island proposal</category>
      <category domain="http://securityratty.com/tag/e-path">e-path</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/represents e-path">represents e-path</category>
      <category domain="http://securityratty.com/tag/municipal networks">municipal networks</category>
      <source url="http://wifinetnews.com/archives/008403.html">Long Island Proposal Snags Again, on Poles</source>
    </item>
    <item>
      <title><![CDATA[U.S. Arms Dealer Tests Legal Bounds in Middle East Arms Bazaar]]></title>
      <link>http://securityratty.com/article/a494b708fadf3d4f453c6495d8064dc2</link>
      <guid>http://securityratty.com/article/a494b708fadf3d4f453c6495d8064dc2</guid>
      <description><![CDATA[Former congressman Curt Weldon is helping broker deals between Russian and Ukranian weapons suppliers and the Iraqi and Libyan governments as part of his new job with a private American defense...]]></description>
      <content:encoded><![CDATA[<p>
Former congressman Curt Weldon is helping broker deals between Russian and Ukranian weapons suppliers and the Iraqi and Libyan governments as part of his new job with a private American defense consulting firm, Wired.com has learned. 
</p>

<p>
Weldon, who is currently being investigated by the FBI over alleged corruption during his time in office, visited Libya in March to discuss a possible military deal, according to a letter describing the trip from Weldon to <a href="http://www.ds-pa.com/">Defense Solutions</a> CEO Timothy Ringgold. In May, Weldon, together with Ringgold and another company representative, traveled to Moscow to discuss working with Russia's weapons-export agency on arms sales to the Middle East.
</p>

<p>
Both trips were part of the company's effort to tap into the growing -- and often legally murky -- market for selling weapons from former Eastern Bloc countries to the Middle East and Afghanistan.
</p>



<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 250px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/weldon_350px.jpg" width="250px" alt="Curt Weldon">

<div id="caption">

Ex-Rep. Curt Weldon, R-Penn., is helping broker deals between Russian weapons suppliers and the Iraqi and Libyan governments through his company, Defense Solutions.<br />
<em>Photo: H. Rumph Jr/AP</em>

</div> 

</div>

<p>
The Russians want to sell weapons to Iraq directly, but "must go slow on Iraq because of political reasons" and want to work with an "intermediary" like Defense Solutions, CEO Ringgold subsequently wrote to colleagues. "They have not spoken with any American company that can offer the quid pro quo that we can or that has the connections in Russia that we have," he boasted.
</p>



<p>
A few years ago, an American company proposing to sell weapons to Libya might have triggered a congressional hearing. So, too, would have a proposal to conduct arms deals with Russia, which the United States has accused of selling high-tech weapons to Syria and Iran. 
</p>

<p>However, U.S. government efforts to rapidly equip countries like Afghanistan and Iraq -- which have largely Soviet-origin weapons -- have created legal ambiguities and loopholes in export controls that didn't exist in years past and given rise to a new class of arms trade middlemen. So, even though both Libya and the Russian arms export agency are on official U.S. blacklists, government officials and analysts involved in weapons sales say the rules have become unclear as the push to equip allies in the global war on terror has blazed new but uncertain legal ground. 
</p>




<p>
Eagerly stepping into that virgin territory is <a href="http://www.ds-pa.com/">Defense Solutions</a>, a Pennsylvania-based company that is carving out a small but lucrative niche in a new international arms bazaar. The firm boasts as its advisors a number of influential Washington insiders, such as retired General Barry McCaffrey, the former White House drug czar.
</p>

<p>
Helping the firm make key connections is Curt Weldon, a former Republican congressman from Pennsylvania at the center of an FBI investigation into alleged conflicts of interest during his time in office.  Weldon, now a key executive at Defense Solutions, is working with the company to set up these weapons deals.
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/btr_60_350px.jpg" alt="">

<div id="caption">

Defense Solutions has also proposed refurbishing Libya's BTR-60 armored personnel carriers, according to a sales proposal seen by Wired.com. Defense Solutions denies drafting a sales proposal to Libya.

</div> 

</div>

<p>
It's an unusual, if not an entirely unexpected chapter for Weldon, whose time in office included frequent trips to Russia. As an influential member of the House Armed Services Committee, Weldon pushed for multibillion-dollar defense programs, like ballistic missile defense, and earned a reputation as a foreign policy gadfly, boasting of his contacts with officials in nations labeled by the administration as "rogue states" such as Libya and North Korea. Weldon's wild claims about a 9/11 cover-up and his sensationalist book warning of an Iranian terror plot, sometimes earned him official scorn and public ridicule, but it was accusations that he steered contracts to Eastern European businesses linked to his daughter's lobbying firm that drew the government's attention.
</p>


<!--pagebreak-->
<p>
Weldon was voted out of office in 2006 just weeks after the FBI raided his daughter's home, and that of one of her associates.
</p>

<p>
Weldon did not respond to e-mails and phone requests to be interviewed or comment for this article. But in a 2006 interview, before the FBI probe was public, Weldon spoke enthusiastically about setting up a "front company" to work with the Russian arms agency, Rosoboronexport. Weldon hoped this company could sell weapons to the Middle East, and other regions, particularly to countries where the U.S. has strained relations. He claimed the director of Rosoboronexport approached him to work with "an American company that would act as a front for weapons these nations want to buy."
</p>

<p>
Weldon called the proposal an "unbelievable offer."
</p>

<p>
The administration, he acknowledged at the time, did not welcome the idea of an American company selling Russian weapons to potentially unfriendly countries. But two years later, Weldon, now a private citizen and chief strategic officer for Defense Solutions, appears to be working on precisely that sort of deal. And whether illegal or not, Defense Solutions' business represents a new phenomenon in the international arms trade business.
</p>

<p>
In years past arms brokers -- firms or individuals who serve as middlemen to facilitate weapons sales between countries -- were largely the stuff of spy thrillers. Unlike traditional American defense companies, like Lockheed Martin or Boeing, which typically sell weapons directly to NATO countries or other governments regarded as friendly to the United States, brokers are often small outfits run by people with sometimes questionable experience and reputations they will sell to anyone. One of the most infamous arms brokers, a Russian named <a href="http://en.wikipedia.org/wiki/Victor_Bout">Viktor Bout</a>, is charged by the United States, United Nations, Interpol and others of funneling arms to terrorists and rebels around the world. He was recently arrested in Thailand. The United States is requesting his extradition on charges of supplying arms to a terrorist organization.
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/bmp_1_350px.jpg" alt="" />

<div id="caption">

Two Marines lower the trim vane on the front of an Iraqi BMP-1 mechanized infantry combat vehicle that was captured during Operation Desert Storm. The American defense consulting firm Defense Solutions has proposed refurbishing Libya's aging fleet of BMP-1s. Defense Solutions denies drafting a sales proposal to Libya.

</div> 

</div>

<p>
But ironically, Iraq has fueled a new market for these professional middlemen; the United States is funneling billions of dollars into modernizing Iraq's army so that the country's government can fend for itself after coalition troops withdraw. And Iraq's largely Soviet-equipped military is a natural market for Eastern European countries brimming with old or out-of-date equipment they would like to unload. The middlemen, in these cases, serve a key role by allowing the U.S. government to do business with an American company, which in turn buys equipment from Eastern Bloc countries in deals worth hundreds of millions of dollars, much of it financed with U.S. taxpayer dollars.
</p>

<p>
One of Defense Solutions' sales -- a deal to sell Hungarian-owed T-72 tanks to Iraq in 2005 -- was typical of these new foreign military sales. But on the more questionable side is the company's plans to work with Rosoboronexport, which is barred from doing business with the U.S. government, and Libya, which is still on the State Department's arms embargo list. 
</p>

<p>
The Eastern European-Middle East arms-brokering business, while in some cases sanctioned by the U.S. government, has run into problems, including outright corruption and quality. Defense contractor Dale Stoffel, the president of Wye Oak Technology, and another American were gunned down in Iraq in December 2004 after Stoffel alleged that the Iraqi Ministry of Defense was involved in a kickback scheme. Like Defense Solutions, the company Stoffel worked for was refurbishing the Iraq's army Eastern Bloc equipment.
</p>

<p>
Another problem is quality. Weapons from the former Soviet Bloc, which the U.S. military euphemistically calls "nonstandard equipment," have been flagged as substandard, acknowledges Brigadier General Charles Luckey, who is in charge of security assistance at <a href="http://www.mnstci.iraq.centcom.mil/">Multi-National Security Transition Command-Iraq</a>. In an interview from Iraq, Brigadier General Luckey said: "One of the frustrating things about buying nonstandard [weapons], is that I'm the guy who has to deal with the fact that some broker I've never heard of allowed weapons to get to Iraq before they were inspected."
</p>

<div id="embed" style="margin: 0px 0px 15px 15px; float: right; width: 350px; height: auto;">

<img src="http://www.wired.com/images/article/full/2008/07/tank_350px.jpg" alt="" />

<div id="caption">

Defense Solutions is carving a new niche in the arms trade, selling Soviet-made weapons to Middle Eastern countries like Afghanistan and Iraq. Defense Solutions sold Hungarian-owed T-72 tanks to Iraq in 2005.

</div> 

</div>


<p>
In one high-profile case, Iraqi officials alleged that a corrupt firm sold them $400 million in shoddy helicopters from Poland. More recently, a company led by a 21-year-old and a former masseur was offered a U.S. government contract worth nearly $300 million to sell ammunition to Afghanistan. The ammunition turned out to be outdated and of dubious origin and several people connected with the company have been indicted. A congressional investigation concluded that the company, which was on a State Department watch list, was able to take advantage of regulatory loopholes by using middlemen.
</p>

<p>
For those concerned about illicit arms trade, this new wave of weapons deals is rife with the potential for corruption and abuse, but for companies eager to pursue markets once regarded as dubious, it represents a lucrative business opportunity.  The problem in these cases, according to those familiar with arms sales, is that it's no longer clear what's legal and what's not.
</p>
<!--pagebreak-->
<p>
Rachel Stohl, an expert on international arms trade and a senior analyst at Center for Defense Information, says that in many ways, the rush to equip Iraq has led the United States to throw caution to the wind. She points to a report by the Government Accountability Office last year that found that some 190,000 weapons sold to Iraq have gone missing. "I think the reality is we won't know, until way after the fact, about all of these irregularities with the Iraq weapons provision program," she said. "We were providing them all these assault rifles that have gone missing. Why? They were not following the standard procedures that were in place."
</p>

<p>
But Iraq and Afghanistan aren't the only markets available to arms brokers like Defense Solutions. The gradual normalization of relations with Libya opens another door into a quasi-legal area of sales. 
</p>

<p>
Like Iraq, Libya has a substantial arsenal of Soviet-origin military weapons, offering a potential market for brokers working with Russia and other former Soviet states. But even when there's not an outright ban, sales to the Middle East are often fraught with controversy, particularly to countries like Libya, which was under international sanction for more than a decade. Even as sanctions against it have been lifted, European companies proposing to sell arms to Libya have faced steep criticism, particularly since the country is still ruled by dictator Muammar Gaddafi, who took power in a military coup in 1969. 
</p>

<p>
While the United States lifted Libya's "state sponsor of terrorism" designation in 2006, other restrictions, such as on the sale of arms, remain in place. A State Department spokesperson confirmed that exports of "lethal munitions" to Libya, such as tanks or related equipment, are still banned, although sales of nonlethal equipment are now allowed on a case-by-case basis.
</p>

<p>
In late March, Weldon traveled to Libya for a weeklong trip at the invitation of the <a href="http://gdf.org.ly/index.php?lang=ar&Page=101&lang=en">Gaddafi Foundation</a>, a group run by the son of Libya's leader, and the chairman of Libya's foreign affairs committee, according to <a href="http://blog.wired.com/defense/files/libya_trip_report.doc">the report he sent to Defense Solutions</a> (.pdf), a copy of which was obtained by Wired.com. The trip reports states: "Agreement reached for Weldon to quickly return to Libya for meetings with son [of Libyan leader Gaddafi] Morti regarding defense and security cooperation."
</p>

<p>
A document dated April 16, just two weeks after Weldon's trip, outlines Defense Solutions' proposal to Libya to refurbish the country's fleet of armored vehicles, including its T-72 tanks, BMP-1 infantry fighting vehicles, and BTR-60 armored personnel carriers. A copy of the sales proposal, also provided to Wired.com, is on Defense Solutions' letterhead, appears to bear the signature of company CEO Timothy Ringgold, and is addressed to Libya's defense procurement council. "Defense Solutions is committed to delivering a full end-to-end solution to its clients," the proposal states. "Besides refurbishing these vehicles, we are capable of providing a full logistics support package, including a two year supply of spare parts, maintenance and repair services, and operator, maintenance, and repair training."
</p>

<p>
In an interview with Wired.com, Ringgold admitted that he's interested in doing business in Libya and confirms receiving Weldon's trip report from Libya, but denies drafting or signing an arms-sale proposal. "I've never made such a document to Libya," Ringgold insisted, after being read the proposal, and told that his signature is on it.
</p>

<p>
In addition to the Libyan arms-deal document, Wired.com has also reviewed copies of e-mails from Ringgold discussing the Libyan deal.
</p>

<p>
While Ringgold denies proposing an arms sale to Libya, he is open about speaking with Rosoboronexport, which has been on a U.S. government sanctions list since 2006, after the Russian state agency allegedly violated the Iran and Syria Nonproliferation Act. An April e-mail provided to Wired.com describes Ringgold, Weldon and Stephan Minikes, a senior advisor to Defense Solutions and a former ambassador, meeting with Rosoboronexport. The conversations included a number of potential deals, including supplying Mi-17 helicopters to Afghanistan and spare parts for Iraq's infantry fighting vehicles. Ringgold wrote to colleagues following the visit, describing the meetings as a "spectacular success," saying the Russian agency "has the ability to undercut all cost proposals from brokers."
</p>

<p>
Ringgold confirmed those discussions and said that his company has sought to do business with Rosoboronexport. Asked whether Ringgold considers his dealings with Russia to be legal, he argued that U.S. companies could work with Rosoboronexport on a "case-by-case" basis. "The particular purpose of the meeting we had -- and I want to be crystal clear -- was in response to a U.S. government requirement," he said.
</p>

<p>
A number of officials at the State Department and in the Pentagon, when contacted for this article, could not say whether working with Rosoboronexport is legal or not. A Pentagon spokeswoman said she was familiar with the issue, but deferred the question to the State Department. When asked about Rosoboronexport's status on the blacklist, John Herzberg, a State Department spokesman replied: "What's on there is on there."
</p>

<p>
Asked whether, given the ban, there was any way a company could legally work with Rosoboronexport, as Ringgold suggested, Herzberg provided an equivocal answer. "At the stage of the process we're at, I'm unable to give you an answer," he said. "You can try elsewhere in government, and maybe they'll be braver than me."
</p>

<p>
In an interview from Iraq, General Luckey conceded it was a murky area, but said, "My understanding is they are currently on our no-go list." 
</p>

<p>
The confusion over debarred parties has even led the U.S. government into its own legal tangles, according to Jim McAleese, a Washington attorney who specializes in government contracting and foreign military sales. Because the Russian government violated U.S. nonproliferation laws, even NASA had to go to Congress to ensure it could work with Russia on Soyuz flights to the international space station. "What I'm warning you about is, don't be surprised by the confusion," McAleese said. "There are a whole bunch of different statutes that were adopted piecemeal and were never intended to be reconciled."
</p>

<p>
But it's the very ambiguity of the law that troubles those who monitor export control. "It's highly unusual to do anything with the Russians, particularly Rosoboronexport," said Scott Jones, director of Export Control Programs at the <a href="http://www.uga.edu/cits/">Center for International Trade and Security</a> at the University of Georgia. 
</p>

<p>
Legal or not, reputable American companies simply don't want to work with banned entities, Jones said, for fear of risking their reputations and business. "Even if it's not an outright prohibition, most companies don't want to put themselves in a liability situation that has really bad PR … and they stay away from it," Jones said. "But if that's your business, pimping out arms from the U.S. or Russia, that's the way it works, and you push as much as possible."
</p>

<p>
Finding any U.S. defense company working with the Russian government at this point would be "remarkable," Jones added.
</p>

<p>
In the meantime, the future for Weldon is unclear. The FBI investigation continues and Weldon's former chief of staff recently pleaded guilty to a conspiracy charge and is cooperating with the government, notes Melanie Sloan, the executive director of <a href="http://www.citizensforethics.org/">Citizens for Responsibility and Ethics in Washington</a>, which filed a complaint against Weldon in 2004. Sloan speculated that Weldon may be charged with "honest service fraud" for misusing his office for personal gain. "It's an easier standard than bribery," she said. "I wouldn't be surprised [if he's charged] with bribery, but I think it will be honest services fraud."
</p>

<p>
Ringgold insists that he and Weldon are on the right side of the law. "Everything we do is in strict compliance with international and U.S. law and we operate only in the best interests of the U.S. government," he said. "I didn't serve 30 years in the United States Army to throw that away on a whim."
</p>

<p>
Asked if Weldon is still working for the company, Ringgold replied: "Absolutely, proudly so." 
</p><br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=3c1b81ed8ecb441b359b5fd6e6dec750" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=3c1b81ed8ecb441b359b5fd6e6dec750" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=f5EjSJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=f5EjSJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=zYmkhj"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=zYmkhj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=S9Ojfj"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=S9Ojfj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=xPEQRJ"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=xPEQRJ" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=OTsesJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=OTsesJ" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=wFj1Jj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=wFj1Jj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=OExjrj"><img src="http://feeds.wired.com/~f/wired/politics/security?i=OExjrj" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=DKk6TJ"><img src="http://feeds.wired.com/~f/wired/politics/security?i=DKk6TJ" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/326164069" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/326164070" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 03 Jul 2008 18:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/arms brokers">arms brokers</category>
      <category domain="http://securityratty.com/tag/brokers">brokers</category>
      <category domain="http://securityratty.com/tag/infamous arms brokers">infamous arms brokers</category>
      <category domain="http://securityratty.com/tag/defense">defense</category>
      <category domain="http://securityratty.com/tag/firm defense solutions">firm defense solutions</category>
      <category domain="http://securityratty.com/tag/arms">arms</category>
      <category domain="http://securityratty.com/tag/arms trade">arms trade</category>
      <category domain="http://securityratty.com/tag/international arms trade">international arms trade</category>
      <category domain="http://securityratty.com/tag/russian weapons suppliers">russian weapons suppliers</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/326164070/defense_solutions">U.S. Arms Dealer Tests Legal Bounds in Middle East Arms Bazaar</source>
    </item>
    <item>
      <title><![CDATA[Dead Possum Patrol Aided by NYC Wireless Network]]></title>
      <link>http://securityratty.com/article/5a95b3f7c00f05c86aaf0e2ae4310dbd</link>
      <guid>http://securityratty.com/article/5a95b3f7c00f05c86aaf0e2ae4310dbd</guid>
      <description><![CDATA[I'm going for the sensational in the headline, but it's part of the story's intro, too: The New York Times reports on some early uses of the city's $500m wireless network designed for non-public uses....]]></description>
      <content:encoded><![CDATA[<p><strong><a href="http://www.nytimes.com/2008/06/28/nyregion/28network.html?partner=rssuserland&emc=rss">I'm going for the sensational in the headline, but it's part of the story's intro, too:</a></strong> The New York Times reports on some early uses of the city's $500m wireless network designed for non-public uses. The network uses UMTS over licensed spectrum specifically devoted the city's municipal and public safety purposes. </p>

<p>One of the projects leaders uses terms that should warm every New Yorker's heart, if he or she knew what they meant. IT head Paul Cosgrave says the system will overcome silos, an often disparaging term for the separation of resources across groups that can only expensively be overcome. It's the government and business equivalent of the academic problem of a lack of cross-discipline focus.</p>

<p>One of the first applications allows sanitation workforce managers a frighteningly precise amount of knowledge about routes, activities, and behavior of trucks in their territory. Let's hope that's not misused! Efficiency is one thing; micro-management is another.</p>

<p>Another project is testing wireless water-meter reading. The city hopes to spend $90 per meter for the upgrade and shed part of a $12.2m contract with Con Edison that covers 850,000 units. What should be useful about this is that problems can be detected by monitoring waterflow patterns, which in turn allows the often huge problems that take months to notice (occurring underground or in basements where rivers formerly flowed) to be stopped before they turn into multi-million-dollar problems for property owners or the city. Anytime anything happens in Manhattan, it's a multi-million dollar problem.<br />
</p>]]></content:encoded>
      <pubDate>Fri, 27 Jun 2008 15:54:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/city hopes">city hopes</category>
      <category domain="http://securityratty.com/tag/500m wireless network">500m wireless network</category>
      <category domain="http://securityratty.com/tag/frighteningly precise amount">frighteningly precise amount</category>
      <category domain="http://securityratty.com/tag/head paul cosgrave">head paul cosgrave</category>
      <category domain="http://securityratty.com/tag/sanitation workforce managers">sanitation workforce managers</category>
      <category domain="http://securityratty.com/tag/overcome">overcome</category>
      <category domain="http://securityratty.com/tag/public safety purposes">public safety purposes</category>
      <source url="http://wifinetnews.com/archives/008383.html">Dead Possum Patrol Aided by NYC Wireless Network</source>
    </item>
    <item>
      <title><![CDATA[Marshall Islands Email Service Paralysed By Spam Attack]]></title>
      <link>http://securityratty.com/article/3a35dfe75aa92edd2bf1f3ca85aa5afd</link>
      <guid>http://securityratty.com/article/3a35dfe75aa92edd2bf1f3ca85aa5afd</guid>
      <description><![CDATA[Email communication in the Marshall Islands was paralysed Tuesday after hackers launched a zombie computer attack on the western Pacific nations only Internet service provider. The Marshall Islands is...]]></description>
      <content:encoded><![CDATA[Email communication in the Marshall Islands was paralysed Tuesday after hackers launched a &#8220;zombie&#8221; computer attack on the western Pacific nation&#8217;s only Internet service provider. The Marshall Islands is a Micronesian island nation in the western Pacific Ocean, located east of the Federated States of Micronesia and south of the U.S. territory of Wake Island.
The [...]]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 19:55:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/marshall islands">marshall islands</category>
      <category domain="http://securityratty.com/tag/micronesian island nation">micronesian island nation</category>
      <category domain="http://securityratty.com/tag/island">island</category>
      <category domain="http://securityratty.com/tag/zombie computer attack">zombie computer attack</category>
      <category domain="http://securityratty.com/tag/western pacific ocean">western pacific ocean</category>
      <category domain="http://securityratty.com/tag/western pacific nations">western pacific nations</category>
      <category domain="http://securityratty.com/tag/internet service provider">internet service provider</category>
      <category domain="http://securityratty.com/tag/email communication">email communication</category>
      <category domain="http://securityratty.com/tag/territory">territory</category>
      <source url="http://cyberinsecure.com/marshall-islands-email-service-paralysed-by-spam-attack/">Marshall Islands Email Service Paralysed By Spam Attack</source>
    </item>
    <item>
      <title><![CDATA[Metro Round-Up: Phila., Minneapolis, St. Louis Park (Minn.), Texas, Foster City (Calif.), Naperville (Ill.), Chehalis and Centralia (Wash.), Cambria C]]></title>
      <link>http://securityratty.com/article/ba9fa39ee95e3dd8fdd6d81a86d5370d</link>
      <guid>http://securityratty.com/article/ba9fa39ee95e3dd8fdd6d81a86d5370d</guid>
      <description><![CDATA[Philadelphia may find operator for Wi-Fi network: The AP reports that the City of Brotherly Love's Wi-Fi network isn't yet down, or down for the count. While it's scheduled to be flipped off tomorrow...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://www.forbes.com/feeds/ap/2008/06/11/ap5104811.html"><strong>Philadelphia may find operator for Wi-Fi network:</strong></a> The AP reports that the City of Brotherly Love's Wi-Fi network isn't yet down, or down for the count. While it's scheduled to be flipped off tomorrow (you can read whatever you like into the phrase "flipped off"), the city is talking to a party it won't disclose about the networks future. EarthLink sued Phila. in May to be able to remove its equipment and cap its liabilities. The city's wireless non-profit arm, Wireless Philadelphia, has made noises about what EarthLink's true liability could be; the non-profit has born some of the electrical cost, and might be seeking to have that repaid on top of penalties and other expenses.</p>

<p><a href="http://www.startribune.com/business/19726749.html?location_refer=Homepage"><strong>Minneapolis suffers the heartbreak of leafage:</strong></a> Leaves are popping in Minneapolis, and Star-Tribune columnist Steve Alexander writes that residents are seeing some Wi-Fi reception problems on that city's Wi-Fi network. This is the only big-city network that can be currently described "successful," even though its long-term success has to be proven out. The firm responsible, USI Wireless, told Alexander they're working on adjusting about 5 percent of antennas to cope with the pesky greenery.</p>

<p><a href="http://www.startribune.com/local/west/19745504.html?location_refer=Style%20+%20People"><strong>St. Louis Park sues ARINC over Wi-Fi network:</strong></a> The Minnesota town says the network never worked, and had earlier discussed a lawsuit. The city wants the value of the contract ($1.7m) plus a very modest amount in damages and fees ($50,000). The city plans to start removing gear if ARINC doesn't sometime in June. But they have to deal with 490 poles erected to hold the nodes and solar-charging gear--sunk into concrete. More recent testing showed that the network worked well in some areas, but the majority of the network did not, according to the Star Tribune.</p>

<p><a href="http://telecompetitor.com/node/671"><strong>Verizon builds out fiber in AT&T territory:</strong></a> Interesting sign of competition in otherwise monopoly-per-provider-type world. Verizon is using AT&T's hard-won statewide video franchising rules in Texas to build competitive fiber in Dallas suburbs. They're apparently not bringing telecom; they're acting like a cable TV firm with data. Verizon owns chunks of territory all over due to it encompassing GTE in a deal years ago. GTE serves suburbs west of Portland, Ore., and east of Seattle, for instance, while Qwest serves most of the rest of each state.</p>

<p><a href="http://sanmateodailynews.com/article/2008-6-7-fc-metrofi"><strong>Foster City Wi-Fi dies on June 20:</strong></a> MetroFi is unlighting its cities, and Foster City opted not to spend the nearly $200,000 asking price MetroFi put on its equipment. MetroFi might still find a buyer, but June 20 is the network's current final day. Naperville, Ill., <a href="http://www.suburbanchicagonews.com/napervillesun/news/998667,6_1_NA11_WIFI_S1.article"><strong>also expects a June 20 shutdown</strong></a>. They, too, were offered the network hardware for 200 grand.</p>

<p><a href="http://www.chronline.com/story.php?subaction=showfull&id=1213119382&archive=&start_from=&ucat=1"><strong>Chehalis lights up:</strong></a> A small city in southern Washington votes to put in Wi-Fi hotzones. The cost is about $53,000 and annual fees $15,000. Funds will come from existing tax and grant sources. The city chose to install service to make sure they're not missing a checkbox on the amenities list for visitors and businesses rather than for a particular, measurable goal.</p>

<p><a href="http://www.chronline.com/story.php?subaction=showfull&id=1213205136&archive=&start_from=&ucat=1"><strong>Nearby Centralia pulls its Wi-Fi:</strong></a> A pilot project in the larger city of Centralia, Wash., a bit north of Chehalis, is shut down when poles used to mount Wi-Fi radios are removed as electrical wires are buried. (The reporter here confuses broadband over powerlines (BPL) with broadband wireless.) The system might be restarted later.</p>

<p><a href="http://www.muniwireless.com/2008/06/10/guest-commentary-how-a-pennsylvania-county-paved-the-way-to-muni-broadband-success/"><strong>Craig Settles writes up Pennsylvania's Cambria County wireless success:</strong></a> This is a network built for particular municipal purposes, part of Settles's long-time drumbeat about having applications first and then networks built for those networks second. He notes that Cambria built a 700 sq mi network that sounds nearly cost neutral through efficiency and cost conservation--it's cheaper to get much more service with this network than it was for a smaller array of services with incumbent-provided networks. </p>

<p><a href="http://www.scsun-news.com/news/ci_9545465"><strong>Santa Fe residents oppose Wi-Fi in the library on health grounds:</strong></a> You know what I have to say about how provable this has turned out to be in clinical studies. I am, however, as always, concerned about these people's health, even if I don't believe that Wi-Fi (or EMF) causes their problems. The group opposed to library-Fi is citing the ADA in this case, uniquely I believe. Six libraries suggested that EMF triggers seizures in epileptics, something I've never heard cited before; maybe CRTs (flickering), but EMF? Wired is substantially less kind than I am, pointing out that EMF other than Wi-Fi produces <a href="http://blog.wired.com/gadgets/2008/06/santa-fe-whiner.html"><strong>vastly higher signal strength</strong></a>. (They're sort of ignoring signal strength at a given point where an individual stands in relation to a transmitter, however.)</p>]]></content:encoded>
      <pubDate>Wed, 11 Jun 2008 10:33:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/big-city network">big-city network</category>
      <category domain="http://securityratty.com/tag/residents oppose wi-fi">residents oppose wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/mount wi-fi radios">mount wi-fi radios</category>
      <category domain="http://securityratty.com/tag/wi-fi hotzones">wi-fi hotzones</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/network hardware">network hardware</category>
      <source url="http://wifinetnews.com/archives/008353.html">Metro Round-Up: Phila., Minneapolis, St. Louis Park (Minn.), Texas, Foster City (Calif.), Naperville (Ill.), Chehalis and Centralia (Wash.), Cambria C</source>
    </item>
    <item>
      <title><![CDATA[Cablevision Antes up $350m for Wi-Fi Network in New York]]></title>
      <link>http://securityratty.com/article/c063b252588e18e19acdb4233b5ae269</link>
      <guid>http://securityratty.com/article/c063b252588e18e19acdb4233b5ae269</guid>
      <description><![CDATA[Cablevision will offer free Wi-Fi to its customers across a swath of New York: The company will spend an astounding $350m over two years--roughly $100 per customer--to put in service that they peg at...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://ap.google.com/article/ALeqM5hEgQXp_pH8K5QHOLxtW_qYtTddOwD90HKPN00"><strong>Cablevision will offer free Wi-Fi to its customers across a swath of New York:</strong></a> The company will spend an astounding $350m over two years--roughly $100 per customer--to put in service that they peg at offering 1.5 Mbps downstream rates. Broadband subscribers to their <a href="http://www.optimum.com/online/why/faster.jsp"><strong>Optimum Online</strong></a> broadband service, which has rates of 15/2 and 30/5 Mbps. Others will pay for access. The company has 3.1m cable customers in New York.</p>

<p>This is the first large-scale Wi-Fi network announced that had no public/private component to it. While Verizon once said they'd blanket New York City with payphone-based Wi-Fi nodes, that never materialized, and it was unclear how seamless the coverage would ever be. This is a full-blown metro-scale network that's not beholden to any political interest, and which can likely use mounting rights already available to Cablevision. (In the past, I've said this, and folks have said that franchising agreements would exclude additional mounted equipment of this kind. Years later, I have to say I've never found anything to support that opinion, but welcome more documented information in the comments.)</p>

<p>The idea is for Wi-Fi to act as a mobile broadband component for Cablevision, to dilute the impact of the Sprint/Clearwire deal announced yesterday. While cable companies rarely compete in a given territory, the Sprint/Clearwire joint venture will make it easier for a customer to get home and mobile broadband and voice from one company, and then turn to another firm for video. This buys Cablevision a quadruple play (voice, video, data, mobile broadband) with a future quintuple play by adding (as they say they will) voice over Wi-Fi service.</p>

<p>Sources indicate that BelAir equipment will be used, which makes sense given BelAir's release nearly three years ago of a <a href="http://www.belairnetworks.com/products/ba100s.cfm"><strong>cable-plant compatible Wi-Fi node</strong></a> designed essentially for precisely this contingency. This is a nice win for BelAir, which will likely be selling somewhere north of 15,000 nodes based on the coverage area and service described. BelAir gear also powers Minneapolis, the only successfully completed big-city Wi-Fi network in North America.</p>]]></content:encoded>
      <pubDate>Thu, 08 May 2008 09:21:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi service">wi-fi service</category>
      <category domain="http://securityratty.com/tag/big-city wi-fi network">big-city wi-fi network</category>
      <category domain="http://securityratty.com/tag/cablevision">cablevision</category>
      <category domain="http://securityratty.com/tag/offer free wi-fi">offer free wi-fi</category>
      <category domain="http://securityratty.com/tag/mobile broadband component">mobile broadband component</category>
      <category domain="http://securityratty.com/tag/york">york</category>
      <category domain="http://securityratty.com/tag/component">component</category>
      <category domain="http://securityratty.com/tag/belair equipment">belair equipment</category>
      <source url="http://wifinetnews.com/archives/008312.html">Cablevision Antes up $350m for Wi-Fi Network in New York</source>
    </item>
    <item>
      <title><![CDATA[Stolen Hong Kong Child Assessment Service flash drive]]></title>
      <link>http://securityratty.com/article/5d18add895c62ca6a728b9f3d99230ee</link>
      <guid>http://securityratty.com/article/5d18add895c62ca6a728b9f3d99230ee</guid>
      <description><![CDATA[Technorati Tag: Security Breach


Date Reported
4/25/08
Organization
People's Republic of China
Contractor/Consultant/Branch
The Government of Hong Kong Special Administrative Region of the People's...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <A href="http://technorati.com/tag/security+breach" rel=tag>Security Breach</A><BR><BR><IMG height=51 src="http://breachblog.com/images/95781-88451/hkdoh.jpg" width=200 align=right> 
<P><FONT size=2><STRONG>Date Reported:</STRONG> <BR>4/25/08</FONT></P>
<P><FONT size=2><STRONG>Organization: <BR></STRONG><A href="http://english.gov.cn/">People's Republic of China</A> </FONT></P>
<P><FONT size=2><STRONG>Contractor/Consultant/Branch:<BR></STRONG><A href="http://www.gov.hk/">The Government of Hong Kong Special Administrative Region of the People's Republic of China</A> </FONT><BR><FONT size=2><A href="http://www.dh.gov.hk/">Department of Health</A> </FONT><BR><FONT size=2><A href="http://www.dhcas.gov.hk/english/centre_info/centre_info_tm.html">Child Assessment Service (Tuen Mun Centre)</A> </FONT></P>
<P><FONT size=2><STRONG>Victims:</STRONG><BR>Adolescent patients</FONT></P>
<P><FONT size=2><STRONG>Number Affected:<BR></STRONG>700</FONT></P>
<P><FONT size=2><STRONG>Types of Data:</STRONG><BR>"detailed records of interviews with troubled youngsters including assessments and, in some cases, their photos, identity card numbers and addresses"</FONT></P>
<P><FONT size=2><STRONG>Breach Description:<BR></STRONG>"The Department of Health ( DH ) is working closely with the police in the investigation of a suspected theft case involving a removable electronic storage device ( USB flash drive ) containing patients’ information."</FONT></P>
<P><FONT size=2><STRONG>Reference URL:</STRONG><BR><A href="http://media-newswire.com/release_1064949.html">Media Newswire</A> </FONT><BR><FONT size=2><A href="http://news.monstersandcritics.com/health/news/article_1401863.php/Hong_Kong_officials_lose_personal_data_on_700_troubled_children">Monsters &amp; Critics</A> </FONT><BR><FONT size=2><A href="http://news.gov.hk/en/category/healthandcommunity/080425/html/080425en05012.htm">Health &amp; Community News</A> </FONT></P>
<P><FONT size=2><STRONG>Report Credit:<BR></STRONG>Hong Kong Department of Health</FONT></P>
<P><FONT size=2><STRONG>Response:</STRONG><BR>From the online sources cited above:</FONT></P>
<P><FONT size=2>Hong Kong - Medical data on almost 700 Hong Kong children and teenagers with social and developmental problems have been lost, the territory's government admitted Friday.<BR><EM>[Evan] This is the first breach that we have reported on The Breach Blog concerning information lost in Hong Kong.&nbsp; Want to know Hong Kong's laws and practices concerning personal information?&nbsp; Check out the Office of the Privacy Commissioner </EM><A href="http://www.pcpd.org.hk/engindex.html"><EM>web site</EM></A></FONT><FONT size=2><EM>.&nbsp; I was impressed with what I saw.</EM></FONT></P>
<P><FONT size=2>The records were held on a memory card which was stolen from an unlocked room at a Child Assessment Centre in the city's Tuen Mun district<BR><EM>[Evan] I DO know that storing confidential information on a memory card (USB drive, flash drive, etc.) without encryption is a bad. bad idea.</EM></FONT></P>
<P><FONT size=2>The USB flash drive, which contained medical reports and referral letters of about 700 named patients, was found to be missing at the Child Assessment Centre ( CAC ) in Tuen Mun on April 18. Attempts to locate the device failed and the incident was reported to the Police on April 22. </FONT></P>
<P><FONT size=2>The lost data included detailed records of interviews with troubled youngsters including assessments and, in some cases, their photos, identity card numbers and addresses.<BR><EM>[Evan] Is a Hong Kong identity card at all comparable to a Social Security card?</EM></FONT></P>
<P><FONT size=2>Hong Kong's Deputy Director of Health Gloria Tam apologized to the families affected and said they should contact police if anyone suspicious approached them with their personal details.</FONT></P>
<P><FONT size=2>The Department of Health ( DH ) is working closely with the police in the investigation</FONT></P>
<P><FONT size=2>The department has sent letters to parents of the involved patients to inform them of the situation and the Privacy Commissioner of Personal Data has also been notified.<BR><EM>[Evan] Here is the Commisioner's office "</EM><A href="http://www.pcpd.org.hk/english/infocentre/press_20080425.html"><EM>Response to the loss of medical data by Department of Health</EM></A><EM>"</EM></FONT><FONT size=2><EM>.</EM></FONT></P>
<P><FONT size=2>As the case involved personal privacy, the affected families should remain alert and report to the police if they were approached by suspicious people with their personal data, she said.</FONT></P>
<P><FONT size=2>'We have reminded our staff about the absolute importance of office security and to strictly adhere to the government's security regulations,' she said in a statement.</FONT></P>
<P><FONT size=2>With immediate effect, staff have been asked to keep storage of identifiable patient information in removable electronic devices to a minimum essential for the efficient conduct of business. The information should be encrypted.<BR><EM>[Evan] Not "should be encrypted", MUST be encrypted.</EM></FONT></P>
<P><FONT size=2>These should not be removed from the specific office/clinic unless with prior approval from the respective service heads.</FONT></P>
<P><FONT size=2>A government hotline has been set up to deal with calls from youngsters and family members concerned over the loss of the data, she added.</FONT></P>
<P><FONT size=2>There is a Department of Health hotline ( 2125 1133 ) for enquiries.&nbsp; The hotline will operate until 9pm today, from 9am to 1pm tomorrow and Sunday and from 9am to 5pm during weekdays from next Monday.</FONT></P>
<P><FONT size=2>Dr Tam said the concerned doctor's case may be dealt with under civil-service regulations after the investigation is completed.<BR><EM>[Evan] I fear what this could mean.</EM></FONT></P>
<P><FONT size=2><STRONG>Commentary:</STRONG><BR>The <A href="http://www.pcpd.org.hk/english/infocentre/press_20080425.html">response</A> from the Privacy Commissioner for Personal Data sums it up pretty well</FONT><FONT size=2>.&nbsp; Section 4 made good sense:</FONT></P>
<P><FONT size=2>"The Privacy Commissioner for Personal Data Mr. Roderick B Woo takes the opportunity to remind both the public and private sectors to exercise particular caution when handling personal data.&nbsp; Stringent handling procedure and sufficient security safeguards should be implemented.&nbsp; In particular, when sensitive personal data are stored or transmitted by electronic means, the data shall be encrypted." </FONT></P>
<P><FONT size=2><STRONG>Past Breaches:</STRONG><BR>Unknown</FONT></P><BR>
<SCRIPT src="http://feeds.feedburner.com/~s/breachblog?i=http://breachblog.com/2008/04/29/hkdoh.aspx" type=text/javascript charset=utf-8></SCRIPT>]]></content:encoded>
      <pubDate>Tue, 29 Apr 2008 18:05:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/personal data sums">personal data sums</category>
      <category domain="http://securityratty.com/tag/personal data">personal data</category>
      <category domain="http://securityratty.com/tag/hong kong">hong kong</category>
      <category domain="http://securityratty.com/tag/sensitive personal data">sensitive personal data</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/lost data">lost data</category>
      <category domain="http://securityratty.com/tag/hong kong department">hong kong department</category>
      <category domain="http://securityratty.com/tag/flash drive">flash drive</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <source url="http://breachblog.com/2008/04/29/hkdoh.aspx">Stolen Hong Kong Child Assessment Service flash drive</source>
    </item>
    <item>
      <title><![CDATA[OmniAmerican Bank targeted by cyber criminals]]></title>
      <link>http://securityratty.com/article/726c4a052fe955720d99ad62680b2d66</link>
      <guid>http://securityratty.com/article/726c4a052fe955720d99ad62680b2d66</guid>
      <description><![CDATA[Technorati Tag: Security Breach

Date Reported
1/24/08

Organization
OmniAmerican Bank

Contractor/Consultant/Branch
None

Victims
Customers

Number Affected
Unknown

Types of Data
Internal bank...]]></description>
      <content:encoded><![CDATA[Technorati Tag: <a href="http://technorati.com/tag/security+breach" rel="tag">Security Breach</a><br><br>
<img src="http://breachblog.com/images/95781-88451/omni.jpg" align="right" height="45" width="198"><font size="2"><span style="font-weight: bold;">Date Reported: </span><br>1/24/08<br><br><span style="font-weight: bold;">Organization: </span><br><a href="http://www.omniamerican.com/" target="_blank"> OmniAmerican Bank</a><br><br><span style="font-weight: bold;">Contractor/Consultant/Branch:</span><br>None<br><br><span style="font-weight: bold;">Victims:</span><br>Customers<br><br><span style="font-weight: bold;">Number Affected:</span><br>Unknown<br><br><span style="font-weight: bold;">Types of Data:</span><br>Internal bank systems and account numbers<br><br><span style="font-weight: bold;">Breach Description:</span><br>An "international gang of cyber criminals" breached OmniAmerican bank systems and used a variety of information to create new personal identification numbers (PINs) and fake debit cards.&nbsp; The criminals then used the cards at to make withdrawls at ATMs in Eastern Europe, Russia, Ukraine, Britain, Canada and New York.<br><br><span style="font-weight: bold;">Reference URL:</span><br><a href="http://www.star-telegram.com/business/story/429367.html" target="_blank"> Star-Telegram Story</a> <br><a href="http://www.sacbee.com/103/story/660690.html" target="_blank"> Sacramento Bee Story</a> <br><br><span style="font-weight: bold;">Report Credit:</span><br>Barry Shlachter, Star-Telegram<br><br><span style="font-weight: bold;">Response:</span><br>From the online sources cited above:<br><br>An international gang of cyber criminals hacked into OmniAmerican Bank's records, the bank's president disclosed Wednesday.<br><br>They stole scores of account numbers, created new PINs, fabricated debit cards, then withdrew cash from ATMs in Eastern Europe, including Russia and Ukraine, as well as in Britain, Canada and New York.<br><span style="font-style: italic;">[Evan] This is either a geographically disperse "gang", or the information was sold to various buyers.</span><br><br>"It was a pretty sophisticated scheme," said Tim Carter, president of the Fort Worth-based bank.<br><span style="font-style: italic;">[Evan] I wonder how sophisticated this attack really was.&nbsp; My first suspicion is a targeted (spear) phishing attack, which isn't very sophisticated.</span><br><br>The amount stolen is not yet known, he said, describing it only as "minimal." No depositors will lose money, he said.<br><br>Fewer than 100 accounts, some of them dormant, were compromised, all with a daily withdrawal limit of less than $1,000, he said.<br><br>After discovering the fraudulent activity Friday afternoon, OmniAmerican placed temporary limits on some ATM and debit-card transactions and suspended some electronic banking services, which were restored Sunday, Carter said. At no time were customer deposits at risk, he stressed. "We reduced by half the dollar amount that could be withdrawn and limited [access] to Texas. We cut out anything outside Texas," Carter said.<br><span style="font-style: italic;">[Evan] Seems like a logical response, but what a hassle for customers.&nbsp; As of Monday morning, the warning below is still posted on OmniAmerican's home page.<br><br><img src="http://images.quickblogcast.com/95781-88451/omninotice.jpg" border="0" width="310"><br></span><br>The unauthorized withdrawals were stopped Friday, and bank employees worked over the weekend to deal with the damage, he said.<br><span style="font-style: italic;">[Evan] The unauthorized withdrawls made on accounts that were known to have been compromised at least.</span><br><br>The bank learned of the breach from customers inquiring about unusual activity in their accounts, from internal monitoring and from a law-enforcement agency, which Carter declined to name.<br><br>Letters alerting check-card holders of the fraudulent activity were mailed Wednesday, the bank said.<br><br>OmniAmerican is also issuing approximately 40,000 new debit cards as a safeguard against future fraudulent activity, Carter said. Each needs a revised personal identification number.<br><br>Martin Carmichael, the Plano-based chief security officer at McAfee, a computer-security firm, said this type of cyber-attack has become "a commonplace occurrence," although some banks are reluctant to admit that their security has been breached.<br><span style="font-style: italic;">[Evan] I agree with Mr. Carmichael.&nbsp; In my work with banks, they all expect to lose a certain amount of money.&nbsp; They say it comes with the territory.&nbsp; If a breach is disclosed to the public, it could negatively affect customer confidence which equates to lost revenue.&nbsp; Lost dollars due to customer confidence usually outweigh the lost dollars from the breach itself.&nbsp; I guess anyway.&nbsp; Banks are attacked and/or compromised every day because they have the one thing everybody wants…money.</span><br><br>Carmichael said OmniAmerican apparently fell victim to one of the more skilled gangs of criminal hackers.<br><span style="font-style: italic;">[Evan] Again, I question how skilled an attacker really needs to be.&nbsp; Many "skilled" attackers go unnoticed and why would skilled attackers stop at "fewer than 100 accounts" before calling attention to themselves?</span><br><br>"If you look at the sophistication of it -- going in, modifying PINs, issuing cards -- this is not a kid out there," he said. "This appears to be something set up. Time was involved in executing it."<br><br>Whoever they are, he said, "they're elite, more elegant, and it's difficult for banks and many enterprises to keep pace with their activities.<br><br>"Banks are under a great amount of pressure to balance risk and shareholder value," said Carmichael, speaking from Las Vegas, where he is attending a conference. "They could do more, [but they] have a hard time justifying the cost until an incident occurs."<br><span style="font-style: italic;">[Evan] Very well put, sad and true.</span><br><br><span style="font-weight: bold;">Commentary:</span><br>Maybe this was a sophisticated attack like some are claiming.&nbsp; I just think about how easy it could be to carry out a spear phishing attack either to download and install malware or collect a password of a bank employee (because many people use one password for everything) and proxy the network traffic through compromised systems in other countries.&nbsp; Phishing and other attacks based on human behavior are usually much more successful than high-tech exploits.<br><br>OmniAmerican deserves some credit for a firm and decisive incident response. <br><br><span style="font-weight: bold;">Past Breaches:</span><br>Unknown</font><br><br>
<script src="http://feeds.feedburner.com/%7Es/breachblog?i=http://breachblog.com/2008/01/28/omni.aspx" type="text/javascript" charset="utf-8"></script>]]></content:encoded>
      <pubDate>Mon, 28 Jan 2008 08:26:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/omniamerican bank">omniamerican bank</category>
      <category domain="http://securityratty.com/tag/bank">bank</category>
      <category domain="http://securityratty.com/tag/omniamerican bank systems">omniamerican bank systems</category>
      <category domain="http://securityratty.com/tag/omniamerican">omniamerican</category>
      <category domain="http://securityratty.com/tag/internal">internal</category>
      <category domain="http://securityratty.com/tag/internal bank systems">internal bank systems</category>
      <category domain="http://securityratty.com/tag/debit cards">debit cards</category>
      <category domain="http://securityratty.com/tag/cards">cards</category>
      <category domain="http://securityratty.com/tag/bank employees">bank employees</category>
      <source url="http://breachblog.com/2008/01/28/omni.aspx">OmniAmerican Bank targeted by cyber criminals</source>
    </item>
    <item>
      <title><![CDATA[Cyber Jihadist Hacking Teams]]></title>
      <link>http://securityratty.com/article/f7c78aa09db3cab063f68e229347908e</link>
      <guid>http://securityratty.com/article/f7c78aa09db3cab063f68e229347908e</guid>
      <description><![CDATA[These groups and fractions of religiously brainwashed IT enthusiasts utilizing outdated ping and HTTP GET flooding attack tools, represent today's greatly overhyped threat possed by the cyber...]]></description>
      <content:encoded><![CDATA[<a href="http://bp0.blogger.com/_wICHhTiQmrA/R2aK1j8-MRI/AAAAAAAABQA/iYI87n62izo/s1600-h/OBL_Crew.jpg"><img id="BLOGGER_PHOTO_ID_5144952277106045202" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R2aK1j8-MRI/AAAAAAAABQA/iYI87n62izo/s200/OBL_Crew.jpg" border="0" /></a>These groups and fractions of religiously brainwashed IT enthusiasts utilizing outdated ping and HTTP GET flooding attack tools, represent today's greatly overhyped threat possed by the cyber jihadists whose cheap PSYOPS dominate, given the lack of strategical thinking, and the lack of sustainable communication channels between them, ruined all of their Electronic Jihad campaigns so far. Religious fundamentalism by itself evolves into religious fanaticism, and with the indoviduals in a desperate psychological need for a belonging to a cause, ends up in one of the oldest and easiest methods for recruitment - the one based on religious beliefs.<br /><br />The teams, and the lone gunmen cyber jihadists in this post are : <strong>Osama Bin Laden's Hacking Crew</strong>, <strong>Ansar AL-Jihad Hackers Team</strong>, <strong>HaCKErS aLAnSaR</strong>, <strong>The Designer - Islamic HaCKEr</strong> and <strong>Alansar Fantom</strong>. None of these are known to have any kind of direct relationships with terrorist groups, therefore they should be considered as terrorist sympathizers.<br /><br />_<strong>Osama Bin Laden's Hacking Crew</strong><br />OBL's Hacking Crew are anything but cheap PSYOPsers trying to teke advantage of outdated conversational marketing approaches to recruit more members, for what yet remains unknown given the lack of any kind of structured formulation of their long-term objectives. They're also promoting the buzz word "E-MUJAHID" to summarize all the possible taska and objectives one would have. This is how they define E-JIHAD :<br /><br />"<em>JIHAD is the term used for struggle against evil. Electronic jihad or simply, E-JIHAD, is the jihad in cyberspace against all the propagandas and false allegations against the message of truth. E-JIHAD is the struggle in cyber space against all false and evil disciplines, ideology and forces of evil. Have you ever think what is the need of army? To defend the freedom and liberty of a territory and defend it from the attacks of evil intruders. similarly , E-jihad is the battle in the field of cyber space, against all false believes, and to defend the truth against the false and mean propagandas and cults. It is as necessary as a regular army, to defend the ideological borders of a nation. It is said, “ it is not the gun, it is man behind the gun “. Do you ever think what makes a “man “? Nothing, but just the faith and ideology. Without faith and ideology, there is no man and definitely , we then have gun , but without any man .</em>"<br /><br /><span style="font-weight: bold;">These are the tips provided for "defending the ideological borders" :</span><br /><br />- <em>They have created anti-Islamic web sites, which are full of everything except the truth. They are full of mean and vulgar allegations against our HOLY QURA’AN, HOLY PROPHAT MOHAMMAD (PEACE BE UPON HIM) and our teachings. We must defend our teachings and fight against the evils. We have to create Islamic web sites, eGroups, Forums, Message boards, &amp; we must support our Mujahideen brothers in Iraq, Afghanistan, Palestine, Kashmir and elsewhere.</em><br /><br />- <em>Many non-Muslims specially jews, Christians and hindus are working in different web groups and communities (like yahoo groups and msn communities) and spreading propaganda against us Muslims. There is a strong need to join such groups and try to refute them. At the moment, the cyber space is free of their opponents. Try to join and refute them, defend your HOLY TEACHINGS OF ISLAM and bring before everyone, nothing but just the truth.</em><br /><br />- <em>One of the most dangerous enemies is those who impersonate themselves as a Muslims but they are not Muslims infact. They are Islamic cults. They are usually qadyanis/ahmadis/mirzais and bahais. some are jews and christians. They are all non Muslims but they impersonate as a Muslim and try to misguide others. They are spreading non-Islamic believes. It needs to be taken care of, we have to fight them. Otherwise, you can imagine how disastrous this situation can be for Muslims. These culprit groups even tried to spread a copy of their teachings in the name of HOLY QURA’ AN. but ALLAH has promised that HE will keep HOLY QURA’AN preserved. That’s why, their attempt failed. What is our job? We must fight with these muslim cults and have to tell others the difference between Muslims and muslims cults.</em><br /><br />- <em>You can even make your own groups and communities to send mails having Muslim news and Islamic teachings. It is a time convenient method because if you have 500 members in your group, by sending a single mail in the group, your message will be in the inboxes of 500 users, and it takes hardly 1-2 minutes. Isn’t it a time saving technique?</em><br /><br />- <em>Many non-Muslim specially Americans, Israelis and Indian hackers always attack our web sites, which are refuting their falsehood and spreading the truth of Islam, the truth that is the only reality. To defend us against such “satanic groups “, we have to organize teamwork, consists of team of Muslim Hackers. Diamond cuts a diamond, to fight with hackers, we need hackers who will defend our sites and make it sure to convey uninterrupted messages to refute the evil and to spread the truth.</em><br /><br /><a href="http://bp3.blogger.com/_wICHhTiQmrA/R2cGnD8-MSI/AAAAAAAABQI/eQfNkGV-Ss4/s1600-h/al_ansar_hacking_team.jpg"><img id="BLOGGER_PHOTO_ID_5145088367439786274" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp3.blogger.com/_wICHhTiQmrA/R2cGnD8-MSI/AAAAAAAABQI/eQfNkGV-Ss4/s200/al_ansar_hacking_team.jpg" border="0" /></a>_<strong>Ansar AL-Jihad Hackers Team and HaCKErS aLAnSaR</strong> <div>Both of these are actually the same, and the group's popularity comes from the <a href="http://ddanchev.blogspot.com/2007/08/cyber-jihadist-dos-tool.html">al-jinan.net</a> and the <a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">al-jinan.org</a> Electronic Jihad campaigns, yes, the failed ones. The original message from Al-jinan's first campaign back in 2006 :</div><div></div><div><strong></strong> </div><div><strong><br />Objective</strong> : <em>Will be updated automatically in the main program and the extra room in the conversation. Date : Saturday, 26 /8/2006 - Hours are from 6 pm to 10 Mecca Time - Jerusalem-Cairo. From 3 pm until 7 Time 05:00 Enter chat http: al-jinan.org/chat. Will work only half an hour before the attack. Leadership decided to use only the major programme in the attack, Lltali follows : The programme operates in the same manner but more strongly Durrah, Member faced many problems in the modernization Durra because of their Alcockez, and the present quality, The programme is designed to automatically update speeds.</em></div><div><em></em></div><div><strong></strong> </div><div><strong><br />Their "pitch"</strong> :</div><div></div><div> </div><div><br />"<em>We note that our enemies Zionists have such groups in order to eliminate sites and sites of resistance Islamic profess. The notes on the Internet that many of the sites Mujahideen are taking place and the closure of sites and this immoral act of brotherhood pigs. Under such a senseless war on Lebanon and Palestine, the Zionists any target in any area. The factors that are responsible for targeting this will affect them and Ihabtahm and create terror in the hearts of God.</em>"</div><div></div><div> </div><div><br />_<strong>The Designer - Islamic HaCKEr</strong></div><div>A defacer going by the handle of The Designer - Islamic HaCKEr was a vivid hacktivist for a while, than switched handles and continued to deface spreading cyber jihadist PSYOPS such as the following message courtesy of one of his defacements :</div><div></div><div> </div><div><br />"<em>Muslims are not Terrorists and U.S.A &amp; Israel &amp; europa are Terrorists. america and israel and europa they terrorists and we moslems not is terrorists . and It was hacked because you are supporting the war in Iraq, palestine and Afghanistan, and it was hacked because you are killing our people and our kids in Iraq, palestine and Afghanistan , and It was hacked because they invaders our land and they vandals our homes and hacked your sites is our solution.</em>"</div><div></div><div> </div><div><br />_<strong>Alansar Fantom</strong></div><div>In direct coordination with The Designer and Al-Ansar Hackers Team, basically a low-profile script kiddie that's also involved in spreading the campaign message and the flood tools to be used in eh Electrnic Jihad campaign.</div><div></div>Offensive cyber terrorism on behalf of terrorists in the sense of cyber mujahideens is overhyped if they're to do it on their own given the factual based evidence of their current state of technical know-how, with the Electronic Jihad program among the most recent such overhyped threats. Defensive cyber terrorism as an extension of cyber jihad in <a href="http://ddanchev.blogspot.com/2007/12/combating-unrestricted-warfare.html">an asymmetric nature</a>, is what is going on online for the time being, and has been going on for the last couple of years.<br /><br />The bottom line, script kiddies cyber jihadists dominate, PSYOPS fill the gaps where there's zero technical know-how, mentors are slowly emerging and providing <a href="http://ddanchev.blogspot.com/2006/12/analysis-of-technical-mujahid-issue-one.html">interactive tutorials</a> to reach <a href="http://ddanchev.blogspot.com/2007/06/analysis-of-technical-mujahid-issue-two.html">a wider audience</a>, <a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">localization of knowledge from English2Arabic</a> is taking place the way propaganda is also localized from Arabic2English, and there's also an ongoing networking going on between cyber jihadists and <a href="http://ddanchev.blogspot.com/2007/11/overperforming-turkish-hacktivists.html">Turkish hacktivists</a> converting into such on <a href="http://ddanchev.blogspot.com/2007/11/mass-defacement-by-turkish-hacktivists.html">a religious level</a>. Case in point - <strong>MuslimWarriors.Org</strong> defacement campaigns with "anti-infidel" related messages.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=9O37xUC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=9O37xUC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=p9ss6zC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=p9ss6zC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=VQjvmLc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=VQjvmLc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LlnWiLc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LlnWiLc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=TN0qukC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=TN0qukC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=nQahnxC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=nQahnxC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=FL7Lv8c"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=FL7Lv8c" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/201954171" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 17 Dec 2007 17:03:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/anti-islamic web sites">anti-islamic web sites</category>
      <category domain="http://securityratty.com/tag/islamic web sites">islamic web sites</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/jihad">jihad</category>
      <category domain="http://securityratty.com/tag/electronic jihad program">electronic jihad program</category>
      <category domain="http://securityratty.com/tag/campaign">campaign</category>
      <category domain="http://securityratty.com/tag/electrnic jihad campaign">electrnic jihad campaign</category>
      <category domain="http://securityratty.com/tag/web sites">web sites</category>
      <category domain="http://securityratty.com/tag/cyber jihad">cyber jihad</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/201954171/cyber-jihadist-hacking-teams.html">Cyber Jihadist Hacking Teams</source>
    </item>
  </channel>
</rss>
