<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: usage]]></title>
    <link>http://securityratty.com/tag/usage</link>
    <description></description>
    <pubDate>Fri, 29 Aug 2008 10:00:44 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[A late look at Interop NY 2008]]></title>
      <link>http://securityratty.com/article/a809cae08aacaa70769cecc5883f1d96</link>
      <guid>http://securityratty.com/article/a809cae08aacaa70769cecc5883f1d96</guid>
      <description><![CDATA[Boy, time flies when youre having fun. Ive just gotten my first opportunity to look back at the statistics from Interop NY 2008. Of all the statistics, the ticketing ones have proven to be the most...]]></description>
      <content:encoded><![CDATA[<p>Boy, time flies when you&#8217;re having fun.  I&#8217;ve just gotten my first opportunity to look back at the statistics from Interop NY 2008.  Of all the statistics, the ticketing ones have proven to be the most interesting - especially when you compare them to the Las Vegas show earlier in the year.  If you look back at the <a href="http://blog.sciencelogic.com/interop-vegas-2008-a-tale-of-user-error/06/2008" target="_blank">details of that ticketing review</a> the stats clearly showed that most tickets were opened due to user error.  In NY, while &#8220;user error&#8221; dominated the other categories, &#8220;facilities&#8221; came a close second.  The InteropNet Help Desk opened a total of 94 tickets during Interop NY.  Of these tickets, 42 turned out to be user error.  Coming in second, with 17 tickets were issues with the facilities, with the most common issue being cabling that had gotten damaged between installation and the time the exhibitor was trying to use it.   In Las Vegas, despite the show being significantly larger, we only saw 6 tickets of that type.  I guess you can chalk that up as yet another reason that doing shows at The Javits Center is so much fun! (Don&#8217;t ask Julia about dealing with the Javits Center. She&#8217;ll talk your ear off.)</p>
<p>After Interop Las Vegas you may have seen our analysis of the data that we collected and delivered in our NOC view.  I thought I&#8217;d recreate the same data for NY and do a short comparison.</p>
<p>1) Like in Vegas, uptime for the network 100%.  This is no small feat considering that we introduced a new wrinkle in NY, taking down the primary NOC while the education portion of the show was still going on.  This was a forced failover to the backup systems, and it went flawlessly.  I&#8217;d like to give a little credit to EM7 on the 100% uptime as it caught a failover to battery power that allowed AC to be restored before a series of critical equipment would have gone down.</p>
<p>2) Again like Vegas, the average monitored device in the show network didn&#8217;t even hit 10% CPU utilization.  Still lots of computing overhead availabe in the show network.</p>
<p>3) The NY show network wasn&#8217;t nearly as busy as in Las Vegas, sustaining an average of only 27Mbps of usage (versus 56 Mbps) in Vegas.</p>
<p>4) Power consumption for the network and NOC in NY clocked in at 445kwh per day, about 25% less than the Las Vegas show.  This wasn&#8217;t because the equipment was any more power efficient, but instead because the show was smaller and therefore there was less network gear.</p>
<p>5) Finally, a stat we didn&#8217;t track too carefully in Las Vegas, but that I find interesting.  During show hours the wireless network average 1,100 users attached.  That&#8217;s a lot of people and a lot of wireless devices.</p>
<p>The good news is there was nothing too unexpected in the data, overall the smaller show led to a smaller number of tickets and smaller consumption of resources across the board.  We hope to have the opportunity to work with the InteropNet team again next year and take a look at this data year-over-year for each show.</p>
]]></content:encoded>
      <pubDate>Mon, 17 Nov 2008 18:41:11 +0000</pubDate>
      <category domain="http://securityratty.com/tag/vegas">vegas</category>
      <category domain="http://securityratty.com/tag/interop las vegas">interop las vegas</category>
      <category domain="http://securityratty.com/tag/las vegas">las vegas</category>
      <category domain="http://securityratty.com/tag/wireless network average">wireless network average</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/interop">interop</category>
      <category domain="http://securityratty.com/tag/network gear">network gear</category>
      <category domain="http://securityratty.com/tag/user error">user error</category>
      <category domain="http://securityratty.com/tag/tickets">tickets</category>
      <source url="http://blog.sciencelogic.com/a-late-look-at-interop-ny-2008/11/2008">A late look at Interop NY 2008</source>
    </item>
    <item>
      <title><![CDATA[A horse's ass approach to virtualization security - The four horsemen]]></title>
      <link>http://securityratty.com/article/8fa3354e9fe6c665bdd3e918f53590e1</link>
      <guid>http://securityratty.com/article/8fa3354e9fe6c665bdd3e918f53590e1</guid>
      <description><![CDATA[I opinioned a bit about the current approaches to virtualization security and how they might be failing to address current and future threats - let me explain further what I mean

In this blog I want...]]></description>
      <content:encoded><![CDATA[I opinioned a bit about the <a href="http://bitarmor.blogspot.com/2008/10/horses-ass-approach-to-virtualization.html">current approaches to virtualization security</a> and how they might be failing to address current and future threats - let me explain further what I mean.<br /><br />In this blog I want to talk about the four elements that make up every computing environment<br />(i.e. the four horsemen :)):<br /><ul><li><span style="font-weight: bold;">Devices</span>: These are the hardware and operating system combinations that host or store the execution environment.</li><li><span style="font-weight: bold;">Applications</span>: Applications execute on host environments (devices + OS) and transform data into information useful for the business.</li><li><span style="font-weight: bold;">Data</span>: Digital representation of information that is acted upon by applications.</li><li><span style="font-weight: bold;">Networks</span>: Enable collaboration and the sharing of information across multiple devices and/or applications.</li></ul><img src="file:///C:/Users/manun/AppData/Local/Temp/moz-screenshot-1.jpg" alt="" /><img src="file:///C:/Users/manun/AppData/Local/Temp/moz-screenshot-2.jpg" alt="" />All four are abso<img src="file:///C:/Users/manun/AppData/Local/Temp/moz-screenshot-3.jpg" alt="" />lutely essential to complete any transaction in the modern business world. However, to gain competitive advantage, organizations are looking to optimize the usage of these four elements. Technology, flexibility, and agility are becoming increasingly important in a fast-changing business world and have therefore led to the rise of virtualization.<br /><br />In my next post I will discuss how these elements are being changed in a virtual environment and what impact it has on security.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/BitArmor1?a=LbtfM"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=LbtfM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=h9Dmm"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=h9Dmm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=lnMVM"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=lnMVM" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/BitArmor1/~4/428570711" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 22 Oct 2008 09:31:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/business world">business world</category>
      <category domain="http://securityratty.com/tag/modern business world">modern business world</category>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization security">virtualization security</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/environment">environment</category>
      <category domain="http://securityratty.com/tag/execution environment">execution environment</category>
      <category domain="http://securityratty.com/tag/applications">applications</category>
      <source url="http://feeds.feedburner.com/~r/BitArmor1/~3/428570711/horses-ass-approach-to-virtualization_22.html">A horse's ass approach to virtualization security - The four horsemen</source>
    </item>
    <item>
      <title><![CDATA[Copycat Web Malware Exploitation Kit Comes with Disclaimer]]></title>
      <link>http://securityratty.com/article/f53d9a8c84706cb980c1a5fe00e3e2f8</link>
      <guid>http://securityratty.com/article/f53d9a8c84706cb980c1a5fe00e3e2f8</guid>
      <description><![CDATA[Such disclaimers make you wonder what's the point of including a notice forwarding the responsibility for the upcoming cybercrime activities to the buyer, when the seller himself is offering daily...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SOPmoVr-3KI/AAAAAAAACNQ/L7Fxlk4j_Gg/s1600-h/1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SOPmoVr-3KI/AAAAAAAACNQ/IZ-phgyZJpY/s200-R/1.JPG" /></a>Such disclaimers make you wonder what's the point of including a notice forwarding the responsibility for the upcoming cybercrime activities to the buyer, when the seller himself is offering daily updates with undetected bots, and is promising to include new exploits within the kit.<br />
<br />
For the time being, this recently released copycat web exploitation malware kit, includes two PDF exploits, IE snapshot, and naturally MDAC, with a DIY builder for the binary. Here's the disclaimer, greatly reminding us of <a href="http://www.theregister.co.uk/2008/04/28/malware_copyright_notice/">Zeus's copyright notice</a> : <br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SOQEl4WjyJI/AAAAAAAACNw/bup8hAFSOIA/s1600-h/3.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SOQEl4WjyJI/AAAAAAAACNw/J0Uxe3C2IPI/s200-R/3.JPG" /></a>"<i>Purchasing this product, you hold the full responsibility for its usage and for consequences which may have been caused by incorrect usage or the usage with some evil intent or violation of the usage rules. The author excludes the placement of the scripts somewhere on the Internet, you can only place them on localhost, virtual machine or on a test botnet (minibotnet). WARNING! The usage of this product with evil intent leads to the criminal responsibility!</i>"<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SOQE_GioZeI/AAAAAAAACN4/-TgImabe7zw/s1600-h/5.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SOQE_GioZeI/AAAAAAAACN4/TC5-5hqbJ0I/s200-R/5.JPG" /></a>What happens when the buyer tries to resell the kit? - "<i>If you try to resell, decode, remove the boundaries, you will lose all the  support, updates and guarantees.</i>" which is surreal considering that the kit is open source one, and just like we've seen with a recent modification of Zeus if it were to include unique features -- which it doesn't -- others would build upon its foundations.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SOQFHcVCuhI/AAAAAAAACOA/gyW259ojaII/s1600-h/7.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SOQFHcVCuhI/AAAAAAAACOA/XvJB5TF7UCE/s200-R/7.JPG" /></a><br />
Going through the exploitation statistics of a sample campaign, you can clearly see that out of the 859 unique visits 250 got exploited with outdated and already patched vulnerabilities. Therefore, diversifying the exploits set would have increased the number of exploited hosts.<br />
<br />
<a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SOQFq13TnPI/AAAAAAAACOI/Ubkw74c4Wn0/s1600-h/9.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SOQFq13TnPI/AAAAAAAACOI/nvO4FBQ3s3k/s200-R/9.JPG" /></a>With IE6 visitors exploited at 46% as a whole, it would be hard not to notice that just like Stormy Wormy's historical persistence of using outdated vulnerabilities, a great majority of today's botnets have been aggregated using old exploits.<br />
<br />
Trying to enforce the intellectual property of a malware kit means you're claiming ownership, and therefore the disclaimer becomes irrelevant.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=7NZmM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=7NZmM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=DOidM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=DOidM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=7V8tm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=7V8tm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=wAlLm"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=wAlLm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=6EqeM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=6EqeM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ZZ3BM"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ZZ3BM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=0wv6m"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=0wv6m" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/409055131" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 01 Oct 2008 22:58:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/kit">kit</category>
      <category domain="http://securityratty.com/tag/usage rules">usage rules</category>
      <category domain="http://securityratty.com/tag/usage">usage</category>
      <category domain="http://securityratty.com/tag/exploits">exploits</category>
      <category domain="http://securityratty.com/tag/pdf exploits">pdf exploits</category>
      <category domain="http://securityratty.com/tag/incorrect usage">incorrect usage</category>
      <category domain="http://securityratty.com/tag/evil intent">evil intent</category>
      <category domain="http://securityratty.com/tag/evil intent leads">evil intent leads</category>
      <category domain="http://securityratty.com/tag/malware kit">malware kit</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/409055131/copycat-web-malware-exploitation-kit.html">Copycat Web Malware Exploitation Kit Comes with Disclaimer</source>
    </item>
    <item>
      <title><![CDATA[Norton AV 2009 is fast and resource lite?]]></title>
      <link>http://securityratty.com/article/5f17ee50f124205306fc86176afed29e</link>
      <guid>http://securityratty.com/article/5f17ee50f124205306fc86176afed29e</guid>
      <description><![CDATA[We shall see my pretty, we shall see


clipped from crave.cnet.co.uk

Norton AntiVirus 2009: First Norton not to suck



The first thing we noticed about the product was that its fast. We clicked one...]]></description>
      <content:encoded><![CDATA[<div > We shall see my pretty, we shall see. </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/0F586810-18DF-4C1C-92AB-8C9F2209D139/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/38ab4b5d-b917-4a9c-ba9b-8209f74906ee/0F586810-18DF-4C1C-92AB-8C9F2209D139/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://crave.cnet.co.uk/software/0,39029471,49298965,00.htm" href="http://crave.cnet.co.uk/software/0,39029471,49298965,00.htm" style="font-size: 11px;">crave.cnet.co.uk</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://crave.cnet.co.uk/software/0,39029471,49298965,00.htm -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">Norton AntiVirus 2009: First Norton not to suck?</div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://crave.cnet.co.uk/software/0,39029471,49298965,00.htm --><P><br />
The first thing we noticed about the product was that it&#8217;s fast. We clicked one button and by the time we&#8217;d Alt-tabbed between the installer, YouTube, and back again (about a minute) it had installed itself. Once up and running, the main menu displays a graph showing CPU activity and how much of that activity is down to Norton AntiVirus 2009. Typically, this hovered around the 5% mark, which isn&#8217;t much to worry about. Memory usage averages less than 7MB between scans, which is also impressive.</P></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/0F586810-18DF-4C1C-92AB-8C9F2209D139/blog/" title="blog or email this clip"><img src="http://content9.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
<BR/><MAP name="bdv_RSS_Ad_170908114400"><AREA alt="Feed Ads By BidVertiser.com" shape="poly" coords="0,0,467,0,467,45,315,45,315,59,0,59" href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=170908114400&amp;click=1" target="_blank" /><AREA alt="Feed Ads By BidVertiser.com" shape="rect" coords="315,45,467,59" href="http://www.bidvertiser.com/bdv/bidvertiser/bdv_ref.dbm?Ref_PID=165886&amp;Ref_Option=main&amp;source=90614506" target="_blank" /></MAP><P><a href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=170908114400&amp;click=1" target="_blank"><IMG src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=165886&amp;bid=400950&amp;PHS=170908114400&amp;rssimage=1&amp;rSRC=2" border="0" usemap="#bdv_RSS_Ad_170908114400" /></a></P>]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 19:44:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/norton">norton</category>
      <category domain="http://securityratty.com/tag/norton antivirus">norton antivirus</category>
      <category domain="http://securityratty.com/tag/activity">activity</category>
      <category domain="http://securityratty.com/tag/memory usage averages">memory usage averages</category>
      <category domain="http://securityratty.com/tag/cpu activity">cpu activity</category>
      <category domain="http://securityratty.com/tag/main menu displays">main menu displays</category>
      <category domain="http://securityratty.com/tag/fast">fast</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/crave">crave</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=619">Norton AV 2009 is fast and resource lite?</source>
    </item>
    <item>
      <title><![CDATA[Meraki Extends SF, Gives Shine to Newsom]]></title>
      <link>http://securityratty.com/article/4003710b9327800771316762b40e5d4e</link>
      <guid>http://securityratty.com/article/4003710b9327800771316762b40e5d4e</guid>
      <description><![CDATA[Despite the failed effort to build city-wide Wi-Fi in San Francisco, Gavin Newsom can still borrow credit: Meraki's SF Free the Net effort, which has them paying a hunk of the cost of building a...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://meraki.com/blog/2008/09/16/free-the-net-san-francisco-makes-great-progress/"><strong>Despite the failed effort to build city-wide Wi-Fi in San Francisco, Gavin Newsom can still borrow credit:</strong></a> Meraki's SF Free the Net effort, which has them paying a hunk of the cost of building a grassroots Wi-Fi network across swaths of the city, continues to be coattailed (with the company's full encouragement) by Mayor Newsom. </p>

<p>Today's announcement sees Meraki nicely footing the bill for extending their service into neighborhood affordable housing, municipal-speak for low-income housing that's subsidized typically through government efforts and funds. Meraki will install networks at 12 buildings in the Tenderloin, known as San Francisco's roughest neighborhood, now going on many decades with that designation.</p>

<p>Meraki claims a "presence" in 42 of 52 major neighborhoods in the city, although <a href="http://sf.meraki.com/map"><strong>their map tells a very different story</strong></a> about how usage is clustered in areas in which it would make perfect sense that usage was seen. </p>

<p>Meraki has engaged in a very interesting public project, and likes the imprimatur of San Francisco, even as they don't really need the city; the city, in contrast, needs them (or Newsom particularly) to salvage something from years of planning that blew up in their faces.</p>

<p>Anyway, SF's EarthLink network would never have been built; or, having been underway, would never have been completed.</p>

<p>Forgive my snark tone and cynicism: Meraki has put a lot of resources into building a publicly accessible network across a hunk of SF that wouldn't otherwise exist.</p>]]></content:encoded>
      <pubDate>Tue, 16 Sep 2008 10:38:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/meraki">meraki</category>
      <category domain="http://securityratty.com/tag/newsom">newsom</category>
      <category domain="http://securityratty.com/tag/meraki nicely">meraki nicely</category>
      <category domain="http://securityratty.com/tag/meraki claims">meraki claims</category>
      <category domain="http://securityratty.com/tag/city-wide wi-fi">city-wide wi-fi</category>
      <category domain="http://securityratty.com/tag/san francisco">san francisco</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/mayor newsom">mayor newsom</category>
      <category domain="http://securityratty.com/tag/gavin newsom">gavin newsom</category>
      <source url="http://wifinetnews.com/archives/008446.html">Meraki Extends SF, Gives Shine to Newsom</source>
    </item>
    <item>
      <title><![CDATA[Web 2.0 Attacks Revealed]]></title>
      <link>http://securityratty.com/article/399f63346ff3bf5fef48d6879df090c4</link>
      <guid>http://securityratty.com/article/399f63346ff3bf5fef48d6879df090c4</guid>
      <description><![CDATA[This paper details various security concerns and risks associated with web 2.0 technologies such as Asynchronous Java script and XML (AJAX), Syndication, aggregation and notification of data in RSS or...]]></description>
      <content:encoded><![CDATA[This paper details various security concerns and risks associated with web 2.0 technologies such as Asynchronous Java script and XML (AJAX), Syndication, aggregation and notification of data in RSS or Atom feeds, mashups created by merging content from different sources. This paper also describes the security implications leading with the usage of web 2.0 technologies such as AJAX, RSS, and Mashups.]]></content:encoded>
      <pubDate>Sun, 14 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/paper">paper</category>
      <category domain="http://securityratty.com/tag/paper details">paper details</category>
      <category domain="http://securityratty.com/tag/asynchronous java script">asynchronous java script</category>
      <category domain="http://securityratty.com/tag/technologies">technologies</category>
      <category domain="http://securityratty.com/tag/atom feeds">atom feeds</category>
      <category domain="http://securityratty.com/tag/security concerns">security concerns</category>
      <category domain="http://securityratty.com/tag/mashups">mashups</category>
      <category domain="http://securityratty.com/tag/ajax">ajax</category>
      <source url="http://www.infosecwriters.com/texts.php?op=display&amp;id=632">Web 2.0 Attacks Revealed</source>
    </item>
    <item>
      <title><![CDATA[Cablevision Activates Major Areas of Its Wi-Fi Network]]></title>
      <link>http://securityratty.com/article/40a07e9654a39fb5503761a8d723e3f9</link>
      <guid>http://securityratty.com/article/40a07e9654a39fb5503761a8d723e3f9</guid>
      <description><![CDATA[New York area cable operator Cablevision flips switch for high-traffic areas of Long Island: They're announcing Thursday that they've turned on the initial phases of their network in Nassau and...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><strong>New York area cable operator Cablevision flips switch for high-traffic areas of Long Island:</strong> They're announcing Thursday that they've turned on the initial phases of their network in Nassau and Suffolk counties, as well as at commuter rail platforms and station parking lots throughout Long Island. The service offers 1.5 Mbps in each direction, the company claims. Detailed site maps for their previous much smaller activated areas are up at <a href="http://www.optimumwifi.com/"><strong>their Wi-Fi information site</strong></a>, and I expect to see these updated soon.</p>

<p>Cablevision will ultimately spend about $300m in building a Wi-Fi network exclusively for its customers; 2.4m of these customers qualify to use the service at no cost. There's no pay as you go option, no monthly subscription; you're either a subscriber of theirs, or not. It's a fascinating strategy, because they're leveraging all these dollars as a tool to crack its competitors in the market. With increasing competition from telephone companies that are offering television service, cable companies need to compete on voice, data, and video, as well as well as on mobile offerings. When the network is built, Cablevision can conceivably offer Wi-Fi telephony service, too.</p>

<p>I'm dying to know what the reduced churn rate and increase in subscriptions will be in six months. Given that hotspot access costs $10 to $30 per month depending on the network, Cablevision is delivering something of value. It's great honey for new subscribers and glue to keep current subscribers.</p>

<p>The company is claiming that with this latest activation, they have the largest Wi-Fi network for consumers in the U.S. They're likely correct. The only other public access network of scale that's being used by large numbers is in Minneapolis, and based on what I know about both networks, Cablevision probably deserves bragging rights. The network in Taipei, Taiwan, is likely still larger, but I haven't heard any usage number in nearly two years; at that point, subscription rates were 10 percent of what had been projected.</p>]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 17:01:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi network">wi-fi network</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/wi-fi network exclusively">wi-fi network exclusively</category>
      <category domain="http://securityratty.com/tag/cablevision">cablevision</category>
      <category domain="http://securityratty.com/tag/public access network">public access network</category>
      <category domain="http://securityratty.com/tag/service offers">service offers</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/hotspot access costs">hotspot access costs</category>
      <category domain="http://securityratty.com/tag/television service">television service</category>
      <source url="http://wifinetnews.com/archives/008429.html">Cablevision Activates Major Areas of Its Wi-Fi Network</source>
    </item>
    <item>
      <title><![CDATA[Security Best Practices]]></title>
      <link>http://securityratty.com/article/d45814d149ccf9dc4b59d81b86bec10a</link>
      <guid>http://securityratty.com/article/d45814d149ccf9dc4b59d81b86bec10a</guid>
      <description><![CDATA[Best practiceAn idea that has no evidence to support its merits, and that probably doesnt work, but that you can attribute to someone else when things go horribly, horribly wrong. Sample Usage: Dont...]]></description>
      <content:encoded><![CDATA[Best practiceAn idea that has no evidence to support its merits, and that probably doesn&#8217;t work, but that you can attribute to someone else when things go horribly, horribly wrong.
Sample Usage: Don&#8217;t worry about the noise from that flaky Geiger counter; this plant complies with all best practices.
       ]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 01:57:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/flaky geiger counter">flaky geiger counter</category>
      <category domain="http://securityratty.com/tag/horribly">horribly</category>
      <category domain="http://securityratty.com/tag/horribly wrong">horribly wrong</category>
      <category domain="http://securityratty.com/tag/practicean idea">practicean idea</category>
      <category domain="http://securityratty.com/tag/plant complies">plant complies</category>
      <category domain="http://securityratty.com/tag/sample usage">sample usage</category>
      <category domain="http://securityratty.com/tag/practices">practices</category>
      <category domain="http://securityratty.com/tag/support">support</category>
      <category domain="http://securityratty.com/tag/attribute">attribute</category>
      <source url="http://securitybuddha.com/2008/09/03/security-best-practices/">Security Best Practices</source>
    </item>
    <item>
      <title><![CDATA[While I Was Out: Compendium of the Last Week's News]]></title>
      <link>http://securityratty.com/article/9b2e491a24c669b08b8cfdf0d0df0b47</link>
      <guid>http://securityratty.com/article/9b2e491a24c669b08b8cfdf0d0df0b47</guid>
      <description><![CDATA[You wouldn't listen, but continued to generate products, news stories, and analysis about wireless networking in my absence: Here's the run down of the last week or so's Wi-Fi and wireless stories....]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><strong>You wouldn't listen, but continued to generate products, news stories, and analysis about wireless networking in my absence:</strong> Here's the run down of the last week or so's Wi-Fi and wireless stories. (Yes, I enjoyed my time off.)</p>

<p><a href="http://www.informationweek.com/news/services/data/showArticle.jhtml?articleID=210200880"><strong>Fourth US airline to go Wi-Fi:</strong></a> Aircell says they have a fourth airline--after American, Delta, and Virgin America--on board for its in-flight Wi-Fi service. The aerial broadband provider's latest partner will be announced soon. Aircell's service went live in 15 American Airlines planes two weeks ago, and there's been a surprising lack of reporting from regular travelers or journalists since the big splash at the launch.</p>

<p><a href="http://seattlepi.nwsource.com/business/376308_software25.html"><strong>Microsoft, two universities research methods for better Wi-Fi handoff for vehicles:</strong></a> The researchers developed a method they call Vi-Fi, writes the Seattle Post-Intelligencer's Todd Bishop, which allows a system to maintain connections with several base stations at once, using a primary access point for traffic until a discontinuity is predicted or encountered. This allows seamless handoffs and continuous voice conversations. </p>

<p><a href="http://www.nytimes.com/2008/08/24/technology/24digi.html?_r=1&oref=slogin"><strong>Speaking of autos and Wi-Fi, concerns raised about Chrysler's in-car Wi-Fi option:</strong></a> Randall Stross wrote nearly two weeks ago in The New York Times about the problem of distraction. With the Internet at your fingertips, can you restrain yourself? The only problem with the humorous and accurate analysis is that millions of business travelers have 3G access via laptop cards already, so you'd think we'd already be seeing the bad effects of automotive area networks.</p>

<p><a href="http://www.omaha.com/index.php?u_page=2798&u_sid=10415031"><strong>A Wi-Fi booster can't post availability signs on highway:</strong></a> The Nebraska town of Louisville has free Wi-Fi downtown, and wanted to post "Visitor Wi-Fi" on a highway sign as another amenity. The state highway department has a policy that doesn't allow the promotion of Wi-Fi, because they believe they'd be inundated. A resident who runs a local Internet firm installed his own signs on the highway; the roads department removed them; he remounted them; they were removed again. The idea of zoning and mounting a billboard apparently hasn't come to the city officials' minds (or perhaps they're prohibited).</p>

<p><a href="http://www.lisburntoday.co.uk/news/PRIMARY-PULLS-PLUG-ON-WIFI.4435678.jp"><strong>The folks spreading misinformation about Wi-Fi health effects cause Ulster school to disable network:</strong></a> I can understand why non-technical folks might think that Wi-Fi has been proven to be unsafe, given the kind of information that's available on the Internet about wireless safety. While there are ongoing studies about the safety of cellular signals--and I'm convinced at this point there's no increased risk to an adult's health by using a cell phone--there is no specific and credible research linked to Wi-Fi, which broadcasts signals at a far lower level than a cell phone, most of the time in most uses.</p>

<p><a href="http://blog.seattlepi.nwsource.com/thebigblog/archives/147374.asp"><strong>Washington state shuts down rest-area Wi-Fi:</strong></a> The $3 for 15 minutes, $7 per day, or $30 per month Wi-Fi service at 28 of Washington's 42 rest areas has been turned off after a year for lack of use. Figures. The fees charged by Parsons and Road Connect aren't unreasonable for a nationally scoped plan, but are ridiculous for limited use. States should either bite the bullet and offer these service for free, partner with national roaming operators who can resell service into large networks of business travelers, or use ads to support the service. Highways in remote areas can typically pick up cell data networks, and ongoing costs should be minimal to operate such networks.</p>

<p><a href="http://www.techworld.com/news/index.cfm?RSS&NewsID=103501"><strong>IEEE approves fast-roaming standard, 802.11r:</strong></a> This new standard is designed to improve the handoff of devices between base stations. This is accomplished in part by allowing base stations to communicate security and quality of service information so that a VoIP over WLAN phone can immediately reassociate without the delay of authentication and other handshaking.</p>

<p><a href="http://www.marketwatch.com/news/story/freefi-networks-releases-figures-wi-fi/story.aspx?guid={5252EF0E-2563-42B7-8A95-2F893580E6F6}&dist=hppr"><strong>Denver airport sees 7,000 connections on a single day last week due to Democratic National Convention:</strong></a> FreeFi released the usage figures recently to show how their service is operating. The network started with about 600 daily users when the switchover from fee to free happened 10 months ago, and now carries about 3,500 daily connections.</p>

<p><a href="http://www.centredaily.com/living/travel/story/804003.html"><strong>Coffee Bean & Tea Leaf goes free:</strong></a> The chain of about 700 cafes will have free Wi-Fi installed by now in all its company-owned stores (about 300).</p>]]></content:encoded>
      <pubDate>Tue, 02 Sep 2008 10:55:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/free wi-fi">free wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/in-car wi-fi option">in-car wi-fi option</category>
      <category domain="http://securityratty.com/tag/wi-fi handoff">wi-fi handoff</category>
      <category domain="http://securityratty.com/tag/free wi-fi downtown">free wi-fi downtown</category>
      <category domain="http://securityratty.com/tag/month wi-fi service">month wi-fi service</category>
      <category domain="http://securityratty.com/tag/rest-area wi-fi">rest-area wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi booster">wi-fi booster</category>
      <category domain="http://securityratty.com/tag/in-flight wi-fi service">in-flight wi-fi service</category>
      <source url="http://wifinetnews.com/archives/008428.html">While I Was Out: Compendium of the Last Week's News</source>
    </item>
    <item>
      <title><![CDATA[Links List 8.29.08]]></title>
      <link>http://securityratty.com/article/f1038682e1a7f7e06f6d230b158bd8a3</link>
      <guid>http://securityratty.com/article/f1038682e1a7f7e06f6d230b158bd8a3</guid>
      <description><![CDATA[ChangeWave Research released a survey of 1,947 people responsible for IT spending. Thirty percent of the respondents reported that third-quarter IT spending was lower than previously planned while 12...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="240" alt="michaelphelps" src="http://blog.sciencelogic.com/wp-content/uploads/2008/08/michaelphelps.jpg" width="174" align="left" border="0" /> ChangeWave Research released a survey of 1,947 people responsible for IT spending. Thirty percent of the respondents <a href="http://www.infoworld.com/article/08/08/27/Grim_outlook_for_US_IT_spending_1.html?source=NLC-DAILY&amp;cgd=2008-08-28" target="_blank">reported that third-quarter IT spending was lower</a> than previously planned &#8211; while 12 percent spent more than planned. Thirty-five percent cited higher energy costs as the top factor for spending slowdown. </p>
<p>Parlez-vous open source? While wide-spread open source usage is still debated in many companies, the French have been advocating for <a href="http://www.infoworld.com/article/08/08/28/35NF-open-source-france-lessons_1.html" target="_blank">all open source all the time in government and education</a>. French President Nicolas Sarkozy set up an economic commission that recommended tax benefits to stimulate more open source development. Lesson learned from France: start &#8216;em early. &#8220;All students in France use open source.&#8221;</p>
<p>Just in time for Labor Day, John Edwards (no, not that one) comes out with an informative guide on &#8220;<a href="http://www.infoworld.com/article/08/08/27/35NF-cloud-providers_1.html" target="_blank">Who provides what in the cloud</a>&#8221;. No doubt, this will be a rapidly expanding list, but what&#8217;s really interesting is the comment on the article. People have very strong opinions on the cloud&#8230;</p>
<p>Research firm Aberdeen Group reports that <a href="http://www.cio.com/article/445863/Network_Management_Tips_for_Managing_Costs?page=1" target="_blank">network costs will increase</a> slightly more than 5 percent over 2007. Contributing factors: &#8220;need for speed&#8221;, shift from standard to mobile PCs (more end points of connectivity), and the ever-expanding network. And of course the hidden costs of multiple tools with multiple management consoles &#8211; if you&#8217;re not smart enough to choose say a comprehensive network management solution that is vendor agnostic&#8230;One tool to monitor them all&#8230;</p>
<p>And just because I miss the Olympics already, here&#8217;s an irreverent take on what it&#8217;s like to lose to Michael Phelps. <a href="http://www.thetechstop.net/?p=1503">http://www.thetechstop.net/?p=1503</a></p>
<p>Enjoy your long Labor Day Weekend!</p>
]]></content:encoded>
      <pubDate>Fri, 29 Aug 2008 10:00:44 +0000</pubDate>
      <category domain="http://securityratty.com/tag/percent">percent</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <category domain="http://securityratty.com/tag/source development">source development</category>
      <category domain="http://securityratty.com/tag/thirty percent">thirty percent</category>
      <category domain="http://securityratty.com/tag/labor day">labor day</category>
      <category domain="http://securityratty.com/tag/source usage">source usage</category>
      <category domain="http://securityratty.com/tag/costs">costs</category>
      <category domain="http://securityratty.com/tag/energy costs">energy costs</category>
      <category domain="http://securityratty.com/tag/thirty-five percent cited">thirty-five percent cited</category>
      <source url="http://blog.sciencelogic.com/links-list-82908/08/2008">Links List 8.29.08</source>
    </item>
  </channel>
</rss>
