<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: tune]]></title>
    <link>http://securityratty.com/tag/tune</link>
    <description></description>
    <pubDate>Fri, 06 Jun 2008 16:45:40 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Interop NY: Hypervisor Quick Poll]]></title>
      <link>http://securityratty.com/article/5f4e1b85bcb4d172e0ed7994ef95ea8e</link>
      <guid>http://securityratty.com/article/5f4e1b85bcb4d172e0ed7994ef95ea8e</guid>
      <description><![CDATA[On the final day of Interop NY 2008 , we conducted a second quick poll of attendees ( check out the first poll on virtualization here ), asking which hypervisors were currently in use. In asking the...]]></description>
      <content:encoded><![CDATA[<p><b><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 0px 10px 10px 0px; border-right-width: 0px" height="99" alt="clip_image002" src="http://blog.sciencelogic.com/wp-content/uploads/2008/09/clip-image002.gif" width="91" align="left" border="0"></b>On the final day of <a href="http://www.interop.com/">Interop NY 2008</a>, we conducted a second quick poll of attendees (<a href="http://blog.sciencelogic.com/interop-ny-virtualization-quick-poll/09/2008">check out the first poll on virtualization here</a>), asking which hypervisors were currently in use. In asking the question, we had certain assumptions – mainly that most people were currently using VMware – and that the real question here was to gauge how quickly Microsoft Hyper-V adoption was coming along. The results both confirmed what we thought and surprised us.
<p><b>The Results: </b>
<p><b><i>Which hypervisor(s) are you currently using?</i></b><i></i>
<ul>
<li><b>72%</b> VMware </li>
<li><b>17%</b> Using something else </li>
<li><b>9%</b> Hyper-V and VMware </li>
<li><b>2%</b> Hyper-V </li>
</ul>
<p>(based on 46 responses)
<p>So the VMware responses were in line with what we thought, although I’ve seen numbers up to 90% share of the market. And about 10% are at least playing with Hyper-V – pretty good numbers just a few months out from launch. But look at 17% using a hypervisor other than Hyper-V and VMware!
<p>We know from talking with people that several brought up Xen. I have to tell you that other than from media and analysts, we never hear about Xen (Citrix), which is why we didn’t include it in the survey as a specific selection. Perhaps it took the introduction of Hyper-V, with the attendant marketing juggernaut, to break people of the VMware-only habit. Xen couldn’t really carry that “heterogeneous” hypervisor environment message on its own, but now that Hyper-V is available, the genie’s out of the bottle. Bears watching.
<p>On another note: We were more successful in hanging onto our marbles on day two – people seemed more in tune to the poll and less focused on collecting giveaways than on day one! [Note: no attendees were <a href="http://blog.sciencelogic.com/interop-ny-virtualization-quick-poll/09/2008">irrevocably harmed</a> during the execution of the polls. :)] At Interop Vegas, May 17 – 19, 2009, we’ll be about a year out from Microsoft launching Hyper-V and will make sure to ask the same question then to track changes in hypervisor adoption.</p>
]]></content:encoded>
      <pubDate>Mon, 22 Sep 2008 14:30:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/vmware-only habit">vmware-only habit</category>
      <category domain="http://securityratty.com/tag/vmware">vmware</category>
      <category domain="http://securityratty.com/tag/quick poll">quick poll</category>
      <category domain="http://securityratty.com/tag/hypervisor">hypervisor</category>
      <category domain="http://securityratty.com/tag/poll">poll</category>
      <category domain="http://securityratty.com/tag/hyper-v">hyper-v</category>
      <category domain="http://securityratty.com/tag/hyper-v pretty">hyper-v pretty</category>
      <category domain="http://securityratty.com/tag/vmware responses">vmware responses</category>
      <category domain="http://securityratty.com/tag/interop">interop</category>
      <source url="http://blog.sciencelogic.com/interop-ny-hypervisor-quick-poll/09/2008">Interop NY: Hypervisor Quick Poll</source>
    </item>
    <item>
      <title><![CDATA[New spam and virus trends from Enterprise]]></title>
      <link>http://securityratty.com/article/ecd17c809af327b45b4ff7c2e1191722</link>
      <guid>http://securityratty.com/article/ecd17c809af327b45b4ff7c2e1191722</guid>
      <description><![CDATA[Written by Amanda Kleha, Google Apps Security &amp; Compliance team


The Google Apps Security &amp; Compliance team, which provides email and web security for more than 40,000 companies, regularly tracks...]]></description>
      <content:encoded><![CDATA[<span class="byline-author">Written by Amanda Kleha, Google Apps Security &amp; Compliance team<br /></span><br /><br />The <a href="http://www.google.com/a/help/intl/en/security/index.html">Google Apps Security &amp; Compliance</a> team, which provides email and web security for more than 40,000 companies, regularly tracks trends in spam, viruses, and other threats. Check out some of our latest findings over on the <a href="http://googleenterprise.blogspot.com/2008/08/security-spotlight-july-virus-attacks.html">Enterprise blog</a>. Also, on Friday, August 15, at 10:00 am PT, we'll be hosting a <a href="http://w.on24.com/r.htm?e=116483&amp;s=1&amp;k=E679E434ECD09EFE9AB299E6B4E16A3B&amp;partnerref=blog_security">webinar</a> on keeping your business safe from web and email threats -- tune in if you'd like to learn more.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/GoogleOnlineSecurityBlog?a=CIWUTK"><img src="http://feeds.feedburner.com/~f/GoogleOnlineSecurityBlog?i=CIWUTK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/GoogleOnlineSecurityBlog?a=ymSiAk"><img src="http://feeds.feedburner.com/~f/GoogleOnlineSecurityBlog?i=ymSiAk" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/GoogleOnlineSecurityBlog/~4/363283445" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 10:01:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google apps security">google apps security</category>
      <category domain="http://securityratty.com/tag/compliance team">compliance team</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/email threats">email threats</category>
      <category domain="http://securityratty.com/tag/web security">web security</category>
      <category domain="http://securityratty.com/tag/threats">threats</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/regularly tracks trends">regularly tracks trends</category>
      <category domain="http://securityratty.com/tag/enterprise blog">enterprise blog</category>
      <source url="http://feeds.feedburner.com/~r/GoogleOnlineSecurityBlog/~3/363283445/new-spam-and-virus-trends-from.html">New spam and virus trends from Enterprise</source>
    </item>
    <item>
      <title><![CDATA[New spam and virus trends from Enterprise]]></title>
      <link>http://securityratty.com/article/48cf5491f7278630b4ae301a0b1e28ea</link>
      <guid>http://securityratty.com/article/48cf5491f7278630b4ae301a0b1e28ea</guid>
      <description><![CDATA[Written by Amanda Kleha, Google Apps Security &amp; Compliance team


The Google Apps Security &amp; Compliance team, which provides email and web security for more than 40,000 companies, regularly tracks...]]></description>
      <content:encoded><![CDATA[<span class="byline-author">Written by Amanda Kleha, Google Apps Security &amp; Compliance team<br /></span><br /><br />The <a href="http://www.google.com/a/help/intl/en/security/index.html">Google Apps Security &amp; Compliance</a> team, which provides email and web security for more than 40,000 companies, regularly tracks trends in spam, viruses, and other threats. Check out some of our latest findings over on the <a href="http://googleenterprise.blogspot.com/2008/08/security-spotlight-july-virus-attacks.html">Enterprise blog</a>. Also, on Friday, August 15, at 10:00 am PT, we'll be hosting a <a href="http://w.on24.com/r.htm?e=116483&amp;s=1&amp;k=E679E434ECD09EFE9AB299E6B4E16A3B&amp;partnerref=blog_security">webinar</a> on keeping your business safe from web and email threats -- tune in if you'd like to learn more.<div class="feedflare">
<a href="http://feedproxy.google.com/~f/GoogleOnlineSecurityBlog?a=EIfcy0RJ"><img src="http://feedproxy.google.com/~f/GoogleOnlineSecurityBlog?d=41" border="0"></img></a> <a href="http://feedproxy.google.com/~f/GoogleOnlineSecurityBlog?a=WOfF3JAs"><img src="http://feedproxy.google.com/~f/GoogleOnlineSecurityBlog?i=WOfF3JAs" border="0"></img></a>
</div><img src="http://feedproxy.google.com/~r/GoogleOnlineSecurityBlog/~4/1mq055TO3rM" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 12 Aug 2008 10:01:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/google apps security">google apps security</category>
      <category domain="http://securityratty.com/tag/compliance team">compliance team</category>
      <category domain="http://securityratty.com/tag/email">email</category>
      <category domain="http://securityratty.com/tag/email threats">email threats</category>
      <category domain="http://securityratty.com/tag/web security">web security</category>
      <category domain="http://securityratty.com/tag/threats">threats</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/regularly tracks trends">regularly tracks trends</category>
      <category domain="http://securityratty.com/tag/enterprise blog">enterprise blog</category>
      <source url="http://feedproxy.google.com/~r/GoogleOnlineSecurityBlog/~3/1mq055TO3rM/new-spam-and-virus-trends-from.html">New spam and virus trends from Enterprise</source>
    </item>
    <item>
      <title><![CDATA[On TV Warfare]]></title>
      <link>http://securityratty.com/article/7aa61433eb4c92c880feff4e75ceeba8</link>
      <guid>http://securityratty.com/article/7aa61433eb4c92c880feff4e75ceeba8</guid>
      <description><![CDATA[It is simply amazing that all the countries now &quot;get it&quot; that war happens primarily on TV ( this vs this ; many other examples are around). It is also amazing that there is NO way to know where &quot;media...]]></description>
      <content:encoded><![CDATA[<p>It is simply amazing that all the countries now &quot;get it&quot; that war happens primarily on TV (<a href="http://www.nytimes.com/2008/08/12/world/europe/12georgia.html?_r=1&amp;pagewanted=2&amp;bl&amp;ei=5087&amp;en=b5bf8c5e2c630491&amp;ex=1218600000&amp;oref=slogin">this</a> vs <a href="http://www.themoscowtimes.com/article/600/42/369720.htm">this</a>; many other examples are around). It is also amazing that there is NO way to know where &quot;media reporting&quot; ends and &quot;psyops&quot; begin. So, a burning tank with no clear markings that you see on TV might be:</p>  <ol>   <li>Tank belonging to warring side A</li>    <li>Tank belonging to warring side B</li>    <li>Just a tank that was passing by and got hit by mistake :-)</li>    <li>Something that looks like a burning tank</li>    <li>An archive shot that reporter added for visual impact</li> </ol>  <p>Same applies to the &quot;primary weapon&quot; of a modern TV war: &quot;evidence of atrocities of the opposing side.&quot;</p>  <p>What's the truth? Who knows... progress brought us &quot;TV wars,&quot;&#160; is this the first <a href="http://www.defensetech.org/archives/004355.html">&quot;YouTube war&quot;?</a> But if we cannot believe the media coverage, how can we believe a random video online? Well ...&#160; maybe the same way we often believe Wikipedia over Britannica.&#160; </p>  <p>In any case, if there was a better time to turn off the TV (and tune off the web news...), it would be now. Also, time to get the dust off my <a href="http://www.amazon.com/War-Anti-War-Making-Todays-Global/dp/0446602590">copy of Toffler?</a></p>  <p>Rant mode off :-)</p>  <div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=eQOSbK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=eQOSbK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=ZcEx8K"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=ZcEx8K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=a86LNK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=a86LNK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/362457461" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 11 Aug 2008 13:41:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tv">tv</category>
      <category domain="http://securityratty.com/tag/tv wars">tv wars</category>
      <category domain="http://securityratty.com/tag/modern tv war">modern tv war</category>
      <category domain="http://securityratty.com/tag/war">war</category>
      <category domain="http://securityratty.com/tag/youtube war">youtube war</category>
      <category domain="http://securityratty.com/tag/tank">tank</category>
      <category domain="http://securityratty.com/tag/media coverage">media coverage</category>
      <category domain="http://securityratty.com/tag/media">media</category>
      <category domain="http://securityratty.com/tag/random video online">random video online</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/362457461/on-tv-warfare.html">On TV Warfare</source>
    </item>
    <item>
      <title><![CDATA[Q&A with Barry Cummings, InteropNet Help Desk Lead]]></title>
      <link>http://securityratty.com/article/360604bd9ff6c3eb687cb330af7e6f66</link>
      <guid>http://securityratty.com/article/360604bd9ff6c3eb687cb330af7e6f66</guid>
      <description><![CDATA[During Interop New York 2008 Hot Stage I had the opportunity to sit down with Barry Cummings, the team lead for the InteropNet Help Desk to talk to him about his experiences with Interop and EM7...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/07/barry-205x3001.jpg" border="0" alt="barry-205x300" width="168" height="244" align="left" /> During Interop New York 2008 Hot Stage I had the opportunity to sit down with Barry Cummings, the team lead for the InteropNet Help Desk to talk to him about his experiences with Interop and EM7.</p>
<p><strong>ScienceLogic:</strong> What&#8217;s your real job when you&#8217;re not here?</p>
<p><strong>Cummings:</strong> I&#8217;m a consultant. I have a networking services company through which I offer services all the way from Layer 1 to desktop support.</p>
<p><strong>ScienceLogic:</strong> How long have you been involved with Interop?</p>
<p><strong>Cummings:</strong> I attended my first show in <a href="http://www.thevarguy.com/2006/09/19/interop-2006-vs-interop/">1996</a>. I volunteered for my first shown in <a href="http://www.highbeam.com/doc/1G1-54672240.html">1999</a> and haven&#8217;t missed a year since.</p>
<p><strong>ScienceLogic: </strong>What makes you want to come back each year for the additional punishment?</p>
<p><strong>Cummings:</strong> Working with <a href="http://farm4.static.flickr.com/3009/2454750176_812e3a5522_o.jpg">the team</a>, which are long-term established friendships at this point. That and the excitement of working with the new technologies as they or even before they come out.</p>
<p><strong>ScienceLogic: </strong>In <a href="http://farm3.static.flickr.com/2128/2453915813_6f2f63f8b9_o.jpg">Las Vegas</a> you were Team Lead for Help Desk. What are you going be doing in NY?</p>
<p><strong>Cummings: </strong>Same thing. That position incorporates some management over the show floor and off-show floor area. That&#8217;s kinda where they put me and I&#8217;ve been doing it solidly for about 5 years.</p>
<p><strong>ScienceLogic:</strong> What are the biggest changes you&#8217;ve seen in the show over the years, what sticks out?</p>
<p><strong>Cummings: </strong>The amount of monitoring that we have and what we do with it has really been changing. We went from more, to almost none and now back to more. We&#8217;ve been through numerous vendors and apps over the years and until recently weren&#8217;t overly happy.</p>
<p><strong>ScienceLogic: </strong>Did the integration between Service Desk and Monitoring that ScienceLogic created help streamline things in a meaningful manner?</p>
<p><strong>Cummings:</strong> Absolutely. In the short time that we have to get things setup there&#8217;s no way to integrate multiple products in this area. Having things pre-integrated allowed us to quickly link network events and the related tickets together in the management system [EM7].</p>
<p><strong>ScienceLogic: </strong>Moving forward on the Service Desk, do you think you can move away from your current paper driven process to a completely paperless process?</p>
<p><strong>Cummings</strong>: I could potentially see it changing as we get the process down and fine tune it. We might be able to get an electronic interface for people. It&#8217;s tough. There&#8217;s always going to be an aspect of the shows we have to hand off on paper and get to legacy people such as electricians and movers.</p>
<p><strong>ScienceLogic: </strong>If there was one thing you could improve that you think would make the overall show or help desk operate better, what would it be?</p>
<p><strong>Cummings: </strong>We need to keep refining processes down to get information into EM7. Better for using the integration and automation that already exists in EM7.</p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Q%26%23038%3BA+with+Barry+Cummings%2C+InteropNet+Help+Desk+Lead&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fqa-with-barry-cummings-interopnet-help-desk-lead%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Wed, 23 Jul 2008 09:31:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/barry cummings">barry cummings</category>
      <category domain="http://securityratty.com/tag/cummings">cummings</category>
      <category domain="http://securityratty.com/tag/desk">desk</category>
      <category domain="http://securityratty.com/tag/sciencelogic">sciencelogic</category>
      <category domain="http://securityratty.com/tag/service desk">service desk</category>
      <category domain="http://securityratty.com/tag/management system em7">management system em7</category>
      <category domain="http://securityratty.com/tag/management">management</category>
      <category domain="http://securityratty.com/tag/em7">em7</category>
      <category domain="http://securityratty.com/tag/team lead">team lead</category>
      <source url="http://blog.sciencelogic.com/qa-with-barry-cummings-interopnet-help-desk-lead/07/2008">Q&amp;A with Barry Cummings, InteropNet Help Desk Lead</source>
    </item>
    <item>
      <title><![CDATA[Lompoc's Comeback]]></title>
      <link>http://securityratty.com/article/d8cd53c51e38bfdb65f16dbc0871b978</link>
      <guid>http://securityratty.com/article/d8cd53c51e38bfdb65f16dbc0871b978</guid>
      <description><![CDATA[I've been citing Lompoc, Calif., as a poster child of what can go wrong in municipal Wi-Fi for a few years: But I apparently have to change my tune. Lompoc, near Santa Barbara, had unreasonable...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/lock.jpg" align="right" border="0" hspace="5" /><a href="http://news.yahoo.com/s/pcworld/20080714/tc_pcworld/148403"><strong>I've been citing Lompoc, Calif., as a poster child of what can go wrong in municipal Wi-Fi for a few years:</strong></a> But I apparently have to change my tune. Lompoc, near Santa Barbara, had unreasonable expectations, if you read their first and second RFPs. The first provider built a network that Lompoc found unacceptable and they bid it out for a second network to be built (some of these details are murky and some under dispute).</p>

<p>What's been clear is that after spending more than $3m, the city couldn't acquire more than a few hundred regular subscribers, about 10 percent of the point they'd need to pay expenses and pay down capital outlay. But it turns out that the backend was as important as their network deployment, IDG News Service reports.</p>

<p>The latest city network administrator brought in Aptilo Networks for backend authentication and session processing, opened the network to 15-minute free trials, and started accepted ad hoc payment. The new network guru also let outsourced contracts expire and brought customer support and other services back in house to reduce expenses and improve the feedback loop. He discovered their existing authentication system was licensed for 500 users, so that might have explained their failure to grow, too.</p>

<p>The city now has 1,000 regular users at all levels, from pay-as-you-go to monthly household subscriptions. They've revised breakeven down to 2,000 subscribers, and say they are breakeven for expenses.</p>

<p>The other problem Lompoc had, by the way, is that the cable and telephone companies didn't sit still. I exaggerate, but when Lomopoc was planning its network, it had very poor coverage for its 42,000 residents for DSL and cable modem service. When the Wi-Fi network was announced, the incumbents started pulling copper, coax, and fiber, and dramatically improved network coverage. The $3m wasn't entirely ill spent so far: it was a kind of reverse incentive to the private companies to get their act together.</p>]]></content:encoded>
      <pubDate>Tue, 15 Jul 2008 06:57:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/city network administrator">city network administrator</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/network coverage">network coverage</category>
      <category domain="http://securityratty.com/tag/network guru">network guru</category>
      <category domain="http://securityratty.com/tag/lompoc">lompoc</category>
      <category domain="http://securityratty.com/tag/network deployment">network deployment</category>
      <category domain="http://securityratty.com/tag/cable">cable</category>
      <source url="http://wifinetnews.com/archives/008396.html">Lompoc's Comeback</source>
    </item>
    <item>
      <title><![CDATA[Lithuania Attacked by Russian Hacktivists, 300 Sites Defaced]]></title>
      <link>http://securityratty.com/article/2d3be07cf61adc6c866a5aad79d898ed</link>
      <guid>http://securityratty.com/article/2d3be07cf61adc6c866a5aad79d898ed</guid>
      <description><![CDATA[Last week's mass defacement of over 300 Lithuanian sites hosted on the same ISP, an upcoming attack that was largely anticipated due to the on purposely escalated online tensions out of Lithuan's...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div>
<div class="separator" style="text-align: center; clear: both;"></div>
<a href="http://bp3.blogger.com/_wICHhTiQmrA/SG_Da11zxkI/AAAAAAAAB30/hOMBHxBYeFc/s1600-h/info_war_slides.jpg" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://bp3.blogger.com/_wICHhTiQmrA/SG_Da11zxkI/AAAAAAAAB30/5pqzMZ2AxxE/s200-R/info_war_slides.jpg" style="border: 0pt none ;" /></a>Last week's <a href="http://blogs.zdnet.com/security/?p=1408">mass defacement of over 300 Lithuanian sites</a> hosted on the same ISP, an upcoming attack that was largely anticipated due to the on purposely escalated online tensions out of Lithuan's accepted legislation banning communist symbols across the counry, once again demonstrates information warfare building capabilities in action.<br />
<br />
Moreover, the attack is again relying on common prerequisites for a successful information warfare campaign, used in the <a href="http://en.wikipedia.org/wiki/Cyberattacks_on_Estonia_2007">Russia vs Estonia cyberattack</a> last year. These very same <a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS tactics</a> ensure the success of the information warfare as a whole :<br />
<br />
- start publicly justifying upcoming attacks based on nationalism sentions, which in a bandwidth empowered (botnets) collectivist society ensures a decent degree of cyber mobilization. In Lithuania's case, the discussions across web forums were on purposely escalated to the point where "if you don't take action, you're not loyal to your country"<br />
<br />
-&nbsp; the media as the battleground for winning the hears and minds of the bandwidth empowered botnet masters, and position the insult against loyal nationalists next to the daily basis, thereby putting the nationalists in a "stand by" mode prompting them to take actions and to break even. In Estonia's case for instance, news broadcasts of the riots on the streets were on purposely broadcast as often as possible, mostly emphasizing on the nationalist sentiments within the crowds<br />
<br />
- prioritizing the attack targets, distributing the targets list and ensuring the coordination in terms of the exact time and data for the attacks to take place is something that didn't happen in the public domain for the mass defacement of Lithuanian sites, the way it happened in the Estonia attack<br />
<br />
- utilizing a <a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">people's information warfare</a> tactic known as the malicious culture of participation, when everyone's consciously contributing bandwidth to be used/abused by those coordinating the attacks<br />
<br />
Also, it's important to point out that by the time they announced their ambitions to attack Lithuania and other countries such as Latvia, Ukraine, and again Estonian sites, they literally put these countries in a "stay tune" mode. <a href="http://www.baltic-course.com/eng/baltics_cis/?doc=2699">Here's a translated statement</a> :<br />
<br />
"<i>All the hackers of the country have decided to unite, to counter the impudent actions of Western superpowers. We are fed up with NATO's encroachment on our motherland, we have had enough of Ukrainian politicians who have forgotten their nation and only think about their own interests. And we are fed up with Estonian government institutions that blatantly re-write history and support fascism," says the appeal that is being circulated on Russian Internet forums.</i>" <br />
<br />
But why did they signalled their intentions, compared to keeping them quiet and attack Lithuania surprisingly? Another relevant use of <a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">PSYOPS</a>, namely the biased exclusiveness and keeping a non-existent status bar for the upcoming attacks. And since they can launch a coordinated attack at the country at any time without warning about it, this warning was aiming to cause confusion prompting country officials to make public statements that could later on be analyzed and a better attack strategy formed on the basis of what they said they've done to ensure the attacks don't succeed. <br />
<br />
If they did launch DDoS attacks compared to <a href="http://blog.washingtonpost.com/securityfix/2008/07/lithuania_weathers_cyber_attac_1.html">defacing over 300 sites hosted on a single ISP</a>, and had warned about the upcoming attacks about a week earlier, successfully shutting down the country's Internet infrastructure would have achieved a double effect, since they did warn them about the attacks, and despite that&nbsp; they countries couldn't prepate to fight back even though fighting back was futile right from the very beginning.<br />
<br />
At least, that's the level of confidence they've build into capabilities.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/06/right-wing-israeli-hackers-deface.html">Right Wing Israeli Hackers Deface Hamas's Site</a><b></b><br />
<a href="http://ddanchev.blogspot.com/2008/06/monetizing-web-site-defacements.html">Monetizing Web Site Defacements</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/pro-serbian-hacktivists-attacking.html">Pro-Serbian Hacktivists Attacking Albanian Web Sites</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/rise-of-kosovo-defacement-groups.html">The Rise of Kosovo Defacement Groups</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/commercial-web-site-defacement-tool.html">A Commercial Web Site Defacement Tool</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/phishing-tactics-evolving.html">Phishing Tactics Evolving</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/web-site-defacement-groups-going.html">Web Site Defacement Groups Going Phishing</a><br />
<a href="http://ddanchev.blogspot.com/2006/02/hacktivism-tensions.html">Hacktivism Tensions</a><br />
<a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/mass-defacement-by-turkish-hacktivists.html">Mass Defacement by Turkish Hacktivists</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/overperforming-turkish-hacktivists.html">Overperforming Turkish Hacktivists</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ZLhnoJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ZLhnoJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=IHUziJ"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=IHUziJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ajtYuj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ajtYuj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=yElfaj"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=yElfaj" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=oii31J"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=oii31J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=3e804J"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=3e804J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=kBFw0j"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=kBFw0j" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/328628825" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 06 Jul 2008 21:19:13 +0000</pubDate>
      <category domain="http://securityratty.com/tag/lithuania">lithuania</category>
      <category domain="http://securityratty.com/tag/attack lithuania surprisingly">attack lithuania surprisingly</category>
      <category domain="http://securityratty.com/tag/estonia">estonia</category>
      <category domain="http://securityratty.com/tag/estonia attack">estonia attack</category>
      <category domain="http://securityratty.com/tag/sites">sites</category>
      <category domain="http://securityratty.com/tag/attack">attack</category>
      <category domain="http://securityratty.com/tag/attack strategy">attack strategy</category>
      <category domain="http://securityratty.com/tag/attacks based">attacks based</category>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/328628825/lithuania-attacked-by-russian.html">Lithuania Attacked by Russian Hacktivists, 300 Sites Defaced</source>
    </item>
    <item>
      <title><![CDATA[Art vs. Science]]></title>
      <link>http://securityratty.com/article/25d89638fe5e2222546301eecff377e6</link>
      <guid>http://securityratty.com/article/25d89638fe5e2222546301eecff377e6</guid>
      <description><![CDATA[I was just reading Dres post, R.I.P. CISSP , over at the tssci security blog, in which he predicts the upcoming OWASP People Certification Project will be the next big thing. This paragraph is quoted...]]></description>
      <content:encoded><![CDATA[<p>I was just reading Dre&#8217;s post, <a href="http://www.tssci-security.com/archives/2008/06/19/rip-cissp/">R.I.P. CISSP</a>, over at the tssci security blog, in which he predicts the upcoming <a href="http://www.owasp.org/index.php/Category:OWASP_Certification_Project">OWASP People Certification Project</a> will be the next big thing.  This paragraph is quoted from <a href="http://duckdown.blogspot.com/2008/06/is-it-bad-thing-that-there-are-no-it.html">James McGovern&#8217;s blog</a> (James is the project leader):</p>
<blockquote><p>
As an Enterprise Architect, I understand the importance of the ability for a security professional to articulate risk to IT and business executives, yet I am also equally passionate that security professionals should also have the capability to sit down at a keyboard and actually do something as opposed to just talking about [it].
</p></blockquote>
<p>I agree wholeheartedly with this sentiment, and I believe the project goals are noble.  So I went to read the latest <a href="https://www.owasp.org/images/6/67/OWASP_People_Certification_Project_-_June_2008_-_Draft.pdf">OPCP draft proposal</a> to see how they planned to tackle this admittedly difficult problem.  What did I find? It&#8217;s just another test, with questions in a dozen or so broad categories.  Far more specialized that CISSP, with topics that are more relevant to application security, but ultimately, still just a test.</p>
<p>The <a href="http://www.veracode.com/blog/?p=28">comment I once made</a> about security educators/trainers is relevant here.  Whatever questions end up on the OPCP test, these educators could probably answer most of them correctly without even studying.  They lecture day in and day out about these topics.  They have heard obscure questions and are prepared to answer them.  And yet, many of them do not have any practical field experience.</p>
<p>A client chastised me once for making a statement that penetration testing is a mixture of art and science.  He wanted to believe that it was completely scientific and could be distilled down to a checklist type approach.  I explained that while much of it can be done methodically, there is a certain amount of skill and intuition that only comes from practical experience.  You learn to recognize that &#8220;gut feel&#8221; when something is amiss.  He became rather incensed and, in effect, told me I was full of it.  This customer went on to institute a rigid, mechanical internal process for web app pen testing that was highly inefficient and, ultimately, still relied mostly on a couple bright people on the team who were in tune with both the art and the science.</p>
<p>Certifications only test the science.</p>
]]></content:encoded>
      <pubDate>Fri, 20 Jun 2008 16:56:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/security professionals">security professionals</category>
      <category domain="http://securityratty.com/tag/security professional">security professional</category>
      <category domain="http://securityratty.com/tag/tssci security blog">tssci security blog</category>
      <category domain="http://securityratty.com/tag/science">science</category>
      <category domain="http://securityratty.com/tag/test">test</category>
      <category domain="http://securityratty.com/tag/opcp test">opcp test</category>
      <category domain="http://securityratty.com/tag/james">james</category>
      <category domain="http://securityratty.com/tag/art">art</category>
      <source url="http://www.veracode.com/blog/?p=110">Art vs. Science</source>
    </item>
    <item>
      <title><![CDATA[Business Week blows the lid off of credit card companies ripping off consumers]]></title>
      <link>http://securityratty.com/article/7c3bef68538b7614a9a484b9b6b823fc</link>
      <guid>http://securityratty.com/article/7c3bef68538b7614a9a484b9b6b823fc</guid>
      <description><![CDATA[There is a great article in Business Week this week that talks about a scam that bank and credit card companies are pulling on consumers. It has resulted in the banks winning arbitration cases against...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>There is a <a href="http://www.businessweek.com/magazine/content/08_24/b4088072611398.htm" target="_blank">great article in Business Week</a> this week that talks about a scam that bank and credit card companies are pulling on consumers.&nbsp; It has resulted in the banks winning arbitration cases against consumers to the tune of a 99.998% clip.&nbsp; That is right, 99.998%.&nbsp; It has turned arbitration, where an impartial judge makes determination into the biggest home field advantage this side of the NBA play offs. </p>

<p>It seems many of the credit card agreements that govern your use of credit cards call for arbitration to settle any disputes between you and the credit card company.&nbsp; Well the credit card company gets to pick the arbitration company. Many pick the National Arbitration Forum, which markets itself to the credit card companies as a form of collection agency.&nbsp; The whole system is basically stacked against the consumer, which results in the credit card companies getting their way.&nbsp; Business Week does a great job of digging in here and finding out all of the dirty secrets of this scam.&nbsp; I highly recommend you read the article for all of the details.</p>

<p>I don't think too many people disagree that over the last years there has been a big swing in the pendulum favoring business's over the consumer. Many of the laws and rules that were put in place to protect consumers over the years have either been thrown out or ignored.&nbsp; Our bankruptcy laws have been totally rewritten to the disadvantage of the consumer.&nbsp; Lazes-fare attitudes toward regulating business has seen oil companies raking in billions of dollars a quarter while we pay 4 dollars a gallon.&nbsp; Health insurance companies raising rates higher than inflation while hospitals have to close for not making enough money.&nbsp; A mortgage industry that without oversight has written loans that has our finance system to the brink of disaster. A return of <a href="http://www.marketwatch.com/news/story/consumers-battle-recession-inflation/story.aspx?guid={E796CAA9-755D-42B2-BCB5-8E85506AF58C}&amp;siteid=yahoomy">inflation and recession</a> at the same time.</p>

<p>Not too advertise my own political views, but do I think it is time for a change?&nbsp; Your damn right I do!&nbsp; I hope that the press shining the light on some of these injustices will make it easier for a new era in Washington to make right (no pun intended) some of the wrongs in our system.</p></div>
]]></content:encoded>
      <pubDate>Fri, 06 Jun 2008 17:45:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit card companies">credit card companies</category>
      <category domain="http://securityratty.com/tag/business week">business week</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/consumers">consumers</category>
      <category domain="http://securityratty.com/tag/arbitration company">arbitration company</category>
      <category domain="http://securityratty.com/tag/arbitration">arbitration</category>
      <category domain="http://securityratty.com/tag/national arbitration forum">national arbitration forum</category>
      <category domain="http://securityratty.com/tag/credit card company">credit card company</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/06/business-week-b.html">Business Week blows the lid off of credit card companies ripping off consumers</source>
    </item>
    <item>
      <title><![CDATA[Business Week blows the lid off of credit card companies ripping off consumers]]></title>
      <link>http://securityratty.com/article/50e16e6f0e10c7e9c3c42192a5c2af52</link>
      <guid>http://securityratty.com/article/50e16e6f0e10c7e9c3c42192a5c2af52</guid>
      <description><![CDATA[There is a great article in Business Week this week that talks about a scam that bank and credit card companies are pulling on consumers. It has resulted in the banks winning arbitration cases against...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>There is a <a href="http://www.businessweek.com/magazine/content/08_24/b4088072611398.htm" target="_blank">great article in Business Week</a> this week that talks about a scam that bank and credit card companies are pulling on consumers.&nbsp; It has resulted in the banks winning arbitration cases against consumers to the tune of a 99.998% clip.&nbsp; That is right, 99.998%.&nbsp; It has turned arbitration, where an impartial judge makes determination into the biggest home field advantage this side of the NBA play offs. </p> <p>It seems many of the credit card agreements that govern your use of credit cards call for arbitration to settle any disputes between you and the credit card company.&nbsp; Well the credit card company gets to pick the arbitration company. Many pick the National Arbitration Forum, which markets itself to the credit card companies as a form of collection agency.&nbsp; The whole system is basically stacked against the consumer, which results in the credit card companies getting their way.&nbsp; Business Week does a great job of digging in here and finding out all of the dirty secrets of this scam.&nbsp; I highly recommend you read the article for all of the details.</p> <p>I don't think too many people disagree that over the last years there has been a big swing in the pendulum favoring business's over the consumer. Many of the laws and rules that were put in place to protect consumers over the years have either been thrown out or ignored.&nbsp; Our bankruptcy laws have been totally rewritten to the disadvantage of the consumer.&nbsp; Lazes-fare attitudes toward regulating business has seen oil companies raking in billions of dollars a quarter while we pay 4 dollars a gallon.&nbsp; Health insurance companies raising rates higher than inflation while hospitals have to close for not making enough money.&nbsp; A mortgage industry that without oversight has written loans that has our finance system to the brink of disaster. A return of inflation and recession at the same time.</p> <p>Not too advertise my own political views, but do I think it is time for a change?&nbsp; Your damn right I do!&nbsp; I hope that the press shining the light on some of these injustices will make it easier for a new era in Washington to make right (no pun intended) some of the wrongs in our system.</p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=wCO6R1"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=wCO6R1" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=C6kZEI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=C6kZEI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=ta6eZI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=ta6eZI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=ORbiwI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=ORbiwI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=wD3tnI"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=wD3tnI" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=SSV7ai"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=SSV7ai" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=16q4ui"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=16q4ui" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/306500228" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 06 Jun 2008 16:45:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/credit card companies">credit card companies</category>
      <category domain="http://securityratty.com/tag/business week">business week</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/consumers">consumers</category>
      <category domain="http://securityratty.com/tag/arbitration company">arbitration company</category>
      <category domain="http://securityratty.com/tag/arbitration">arbitration</category>
      <category domain="http://securityratty.com/tag/national arbitration forum">national arbitration forum</category>
      <category domain="http://securityratty.com/tag/credit card company">credit card company</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/306500228/business-week-b.html">Business Week blows the lid off of credit card companies ripping off consumers</source>
    </item>
  </channel>
</rss>
